CISO Series Podcast This Security Control Is So Good We Don't Even Have to Turn It On (LIVE in Clearwater, FL)
Apr 1, 2025
Christina Shannon, CIO of KIK Consumer Products, and Jim Bowie, CISO of Tampa General Hospital, discuss vital cybersecurity strategies. They highlight the need for continuous security awareness training over traditional compliance sessions. The duo explores the balance between high-pressure environments and team well-being. As they dissect the vulnerabilities of weak passwords versus phishing, they also share humorous incidents from training, emphasizing a collaborative and engaging approach to fostering a strong security culture.
AI Snips
Chapters
Transcript
Episode notes
Automate Strong Identity Verification
- Use multi-factor and out-of-band verification for high-risk requests like password resets.
- Automate help-desk flows to require digital ID and facial verification before resets occur.
Use Verbal Passphrases Against Deepfakes
- Use verbal passphrases and stop-the-call checks to detect deepfakes in real time.
- Never record the verbal password or store it in a message or voicemail.
Security Theater Needs Translation
- Leadership often suggests security theater solutions like blocking all websites out of fear.
- You must explain operational costs and bypass risks to get practical, sustainable controls.