Free Daily Podcast Summary
The ITSPmagazine Podcast: Daily Summaries Delivered
by ITSPmagazine, Sean Martin, Marco Ciappelli
Founded in 2015, ITSPmagazine began as a vision for a publication positioned at the critical intersection of technology, cybersecurity, and society. What started as a written publication has evolved into a comprehensive repository for all their content—podcasts, articles, event coverage, interviews, videos, panels, and everything they create. This is where Sean Martin and Marco Ciappelli talk about cybersecurity, technology, society, music, storytelling, branding, conference coverage, and whatever else catches their attention. Over a decade of conversations exploring how these worlds collide, influence each other, and shape the human experience. This is where you'll find it all.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 3 days ago39 min
Insider Threat Detection: Why Employee Reporting Beats Tools | An On Location Conversation at ISC2 Security Congress with Collin Sampson, VP, Infrastructure and CISO
Your tools see an authorized user doing their job. That is the gap Collin Sampson, VP, Infrastructure and CISO at Expion Health, describes when he talks insider threat with Sean Martin at ISC2 Security Congress in Denver.Sampson opens with a case from his session: a system administrator logged into an HR system and wrote employees' personal information on paper. He says none of the company's technology would have caught it, and the company learned of it only when law enforcement made contact.Sean asks what else gets an organization's attention. Sampson says that in a lot of cases the best detection he has found is an employee reporting it, or a supervisor noticing a change in tone, attitude or personality. The security team then looks back at that person's access.The conversation moves to why tools stall, since the person is authorized, and to where AI might help filter log volume down to the unusual, with some false positives along the way.Sampson also covers why reporting a colleague goes against the grain, and a company where a manager wanted to hear everything first. That company had to launch new training saying anyone can report anything at any time to compliance and security. Sean closes by asking about AI agents as insiders.Sampson's account comes from cases and companies he has worked at. Listen for what you can change this quarter: where reports go, who sees them, and whether people feel safe making them.Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=the-best-insider-detection-is-an-employee-who-can-report-safely
- 3 days ago15 min
Tabletop Exercises That Test Security Analysts, Not the Compliance Box | An On Location Conversation at ISC2 Security Congress with Aaron Bond and Ruben Perales III
Traditional incident response tabletops often check a compliance box without telling you much about the people who have to respond. What would it take to test the analysts and engineers themselves, and to do it more than once in a while?Sean Martin talks with Aaron Bond, Cybersecurity Senior Manager - Defensive Security at The Home Depot, and Ruben Perales III, Incident Commander at The Home Depot, at ISC2 Security Congress in Denver. They had both taken part in traditional tabletops and wanted an iterative exercise that runs more often.The conversation starts with the format. Bond says an analyst's decision has a consequence, good or bad, that reshapes the investigation, a goal he describes as making it somewhat like Dungeons & Dragons. Perales describes a session of about an hour with analysts, sometimes engineers, incident commanders and a game master, and an ending that is left open.They then cover how an AI-built narrative earned management buy-in, since Bond says it cuts days, weeks or months of scenario writing to about an hour. They also discuss what the exercise surfaces: interactions with other teams that were needed but never documented. Perales says, "I feel like in every organization there are gaps between documentation and operation."Bond explains how an in-house tool tracks timing, resolution and flags captured, which frees the game master to watch communication between teams. The episode closes with a look at a second session, a roundtable on how practitioners and leaders use AI in the security operations center, and Sean's point that it has to be done responsibly.For security leaders, this is a practical look at testing people and process, not paperwork.Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=tabletops-test-the-analysts-who-respond-not-the-compliance-box
- 3 days ago20 min
Threat Intelligence Meets GRC: Why Half the Findings Were Control Gaps | An On Location Conversation at ISC2 Security Congress with Desta Bailey and Sarah Bryson
Threat intelligence, red team results and purple team exercises can be rich and practical, yet hard to turn into strategy. The risk register often swallows what teams find. Sean Martin talks with two practitioners who built a way around that.Sarah Bryson, Senior SRC Advisor at Kudelski Security, and Desta Bailey, Cyber Threat Intelligence Analyst at Southwest Airlines, presented their session at ISC2 Security Congress. They worked together at Southwest Airlines, and Bryson has since moved to the advisory side.The conversation starts with a number. When Bryson's team overlaid threats, tactics and controls on anomalous event and incident data, she says, about half of the findings were control gaps that should have been in place for policy. From there, Bryson and Bailey describe the intel pipeline they built to feed the intelligence program into governance, risk and compliance (GRC).Bailey walks through how an executive's headline question gets answered: pull the intelligence, map it to NIST Cybersecurity Framework (CSF) 2.0 outcomes and the company's control set, then pass it to GRC partners. Bryson explains what owning the control lifecycle allows, and what the finding meant for an incident response team she describes as among the most overworked in cyber.They also cover tying a patch request to a specific threat, documenting the process so it runs the same way whoever does it, and where audits fit alongside a threat-driven approach.For security leaders, the takeaway is practical: bring gaps to the risk committee before they become incidents, and get intelligence and GRC teams talking first.Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=about-half-of-the-anomalous-incident-findings-were-policy-violationsResourcesThe NIST Cybersecurity Framework (CSF) 2.0 | https://www.nist.gov/publications/nist-cybersecurity-framework-csf-20
- 3 days ago32 min
Security Built on Fear Failed Until Children Redesigned It as Comics | An On Location Conversation at ISC2 Security Congress with Joseph Carson, James McQuiggan and vCISO and Human Risk Management advisor at Apparent Security
A security program built on enforcement and fear creates friction, and people stop paying attention. At ISC2 Security Congress in Denver, Joseph Carson, Chief Security Evangelist & Advisory CISO at Segura, tells Sean Martin what happened when his team at a large transportation car manufacturer admitted its approach was not working.Carson describes the team putting enforcements and policies in place, then realizing a couple of months in that the program rested on fear: you need to patch, reboot, update, take this course. Noise from the next conference room turned out to be a bring-your-kid-to-the-office day, and the team sat with the children for an hour, an hour and a half, asking what they would suggest.Two ideas came out of that room. One child asked about comic books, which meant less text and fewer translations. Another suggested bathroom doors, because everyone goes at least once a day. Each quarter the awareness training now carries a new four-panel message on not plugging in USBs, using multi-factor authentication and patching systems, posted on bathroom doors, in elevators and at the canteens.Carson calls it a redefining moment in his career. It changed how he views security: be an enabler and a promoter, so people see it as a good thing. That is why he prefers zero friction to zero trust, meaning security that just works and helps people meet the metrics they are measured on.The conversation also touches on career disruption, internal security evangelists and using AI with guardrails, and it matters for anyone whose awareness program is being ignored.Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=a-security-program-built-on-fear-failed-until-children-redesigned-it-as-comicsResourcesCybersecurity Courses on Udemy | https://www.udemy.com/topic/cyber-security/?p=28AI Act | Shaping Europe's digital future | https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-aiThe NIST Cybersecurity Framework (CSF) 2.0 | https://www.nist.gov/publications/nist-cybersecurity-framework-csf-20
- 3 days ago25 min
Women in Cybersecurity: Why the 50x50 Goal for 2050 Is Built Slowly | An On Location Conversation at ISC2 Security Congress with Dhriti P. Stocks
A goal set for 2050 sounds slow. Dhriti P. Stocks says that is the point: quick interventions in cybersecurity careers will not last.Dhriti P. Stocks, Executive Director at the Center for Cyber Safety and Education, joins Sean Martin at ISC2 Security Congress in Denver. She explains the Global 50x50 Initiative, which aims to put 50% women in cybersecurity by the year 2050, and why it was the first thing she was told when invited to join the mission.The conversation opens with Stocks's 20 years uplifting women and girls in STEM and her work with populations that have historically faced barriers. She then lays out why the plan covers a full career, from K to 12 to senior leaders, across eight action areas, and why the aim is women who can speak into decisions, lead and advance, not only enter the field. She warns about a leaky bucket, where burnout drives women out at a higher rate.Stocks and Sean also cover the Center's three focus areas: scholarships, Cybersecurity Health Check for small businesses and nonprofits, and 50x50. She describes how volunteers join, including an advisory council assembled roughly every four months around one action area, and shares the story of a scholarship recipient from Ghana who went on to a CISO role and the Center's board.Her closing asks are to invest, engage and advocate. For listeners who work in security, it is a practical look at how a long-term workforce goal gets built, and where their own time and expertise can help.Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=a-2050-goal-for-women-in-cybersecurity-built-slowly-so-it-lastsResourcesCybersecurity Health Check | https://www.iamcybersafe.org/s/cyberhealthcheckCenter for Cyber Safety and Education Launches Global 50x50 Initiative to Achieve Gender Parity in Cybersecurity by 2050 | https://www.isc2.org/Insights/2025/10/Gender-Parity-in-CybersecurityAcademic Scholarships - Center for Cyber Safety and Education | https://www.iamcybersafe.org/s/academic-scholarships
- 3 days ago26 min
Why Waiting for Q Day Fails: Quantum, AI and Getting Security Done Now | An On Location Conversation at ISC2 Security Congress with Jaya Baloo, COO & CISO
Everyone wants a date. If quantum computing is far enough away, the quantum work can wait, along with the backlog and the outdated asset inventory. Jaya Baloo says that comfort is the problem.Sean Martin talks with Jaya Baloo, COO & CISO at AISLE, after her afternoon keynote at ISC2 Security Congress in Denver. Baloo has worked on quantum for years, including the EU Quantum Flagship, which organizes the field into four pillars: computing, communication, simulation, and sensing and metrology.The conversation turns to her keynote message: stop fixating on numbers and artificial boundaries, and do not say you have until 2029. Baloo says AI is an accelerant to a potential break of RSA, which is why she urges people to keep marching forward, potentially at a faster clip. Sean raises the usual excuses, a backlog of old systems and a configuration management database that is not current. Baloo's reply is that ignoring them will not bring the database up to date.They also cover why teams put the urgent ahead of the important, and whether not understanding AI or quantum excuses inaction. Baloo says it does not, and offers starting points: security protections on open-weight models, knowing what a frontier large language model is authorized to do, hunting shadow AI usage, an AI asset register, and visibility into third-party suppliers already using AI. She also says waiting for governments will be too little, too late, and closes on observability for AI systems.For security leaders, the takeaway is a place to start now rather than a year to wait for.Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=waiting-for-q-day-is-the-wrong-plan-and-ai-removes-the-dateResourcesISO/IEC 42001:2023 - AI management systems | https://www.iso.org/standard/42001Quantum Flagship (EU) | https://qt.eu/
- 3 days ago21 min
Certified to Learn AI but Blocked from Using It: The Access Gap in Security | An On Location Conversation at ISC2 Security Congress with Casey Marks, Chief Operating Officer
Employers send people to conferences and through certification exams, then limit what they can do with the result. With AI, that can mean staff may use it for certain tasks but are not allowed to code, build agents or connect systems.Sean Martin raises that gap with Casey Marks, Chief Operating Officer at ISC2, at ISC2 Security Congress in Denver. Marks says there is a superficiality in learning something you cannot apply, and calls it a fundamental question for the individual and the environment they work in.The conversation moves to why certification exists. Marks describes it as scalable opportunity for people who cannot spend 20 years in formal education, and says most ISC2 certifications require work experience, with the Certified in Cybersecurity (CC) as the exception.Sean describes having access to tools and a supportive company earlier in his career, and wonders about people without that access now. Marks says he wishes he had better answers and that "I think that opportunity is gate kept," a matter of genuine concern and of economics. Sean adds that tokens cost money too. Marks offers a conjecture: given the risks, environments will have to move toward permissive ones, and those that do not "probably won't be around."They close on the AI security certification ISC2 announced that day. Marks describes it as AI first, not AI added to the CISSP domains, and says the beta test is expected for candidates globally in December. His participation figures are his own.For security leaders, the conversation asks whether the people you train can practice what they learn.Read the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=certified-to-learn-ai-not-allowed-to-use-it-the-access-gapResourcesISC2 Releases AI Security Certification Pilot Exam Outline | https://www.isc2.org/Insights/2026/10/isc2-releases-ai-security-certification-pilot-exam-outlineCode of Professional Conduct in Practice (ISC2 Express Course) | https://www.isc2.org/Insights/2026/08/new-isc2-express-courseCertified in Cybersecurity Certification Exam Outline | https://www.isc2.org/certifications/cc/cc-certification-exam-outline
- 4 days ago9 min
Assail Puts Its Own AI Model on Customer Hardware, Keeping Vulnerability Data Local | A Brand Story Conversation with Alissa Knight, CEO & Chief AI Officer at Assail | Hosted by Sean Martin
Alissa Knight, CEO & Chief AI Officer at Assail, says federal, military and large enterprise buyers raise two worries about running offensive cyber operations in the cloud: the cost of tokens and where vulnerability data ends up. Assail does not sell to small and midsize businesses.Knight says Assail is the only adversarial exposure validation platform that gives the customer the entire application stack, including the AI model. She says it is a small language model, about 60 gigabytes with 31 billion parameters, that can run on hardware such as the RTX 6000 Pro, and that it now runs on both x86 and ARM. She also says competing wrappers around frontier models can report clean results when the real cause is a high rejection rate behind the scenes. These are her claims.Sean asked for scenarios where the model needs to sit on premises. Knight says running disconnected has let Assail serve federal and military users in contested areas, and gives customers AI sovereignty and data sovereignty. Sean also asked what comes out the other side: she describes an interactive report in plain English with exploit evidence, a video of the attack, and patches.The conversation matters for any team weighing offensive security tools: ask where the model runs, where findings go, and what a clean report actually means.This is a Brand Highlight. A Brand Highlight is a ~5 minute introductory conversation designed to put a spotlight on the guest and their company. Learn more: https://www.studioc60.com/creation#highlightGUESTAlissa Knight, CEO & Chief AI Officer at AssailOn LinkedIn: https://www.linkedin.com/in/alissaknight/More from Assail on ITSPmagazine: https://www.itspmagazine.com/blog?brand=assailRESOURCESLearn more about Assail: https://www.assailai.com/Learn more about Assail Federal: https://assailfederal.com▶︎ Want your brand on ITSPmagazine? Explore all of the options here: https://www.itspmagazine.com/advertiseKEYWORDSAlissa Knight, Assail, Sean Martin, brand story, brand marketing, marketing podcast, brand highlight, Recorded On Location at ISC2 Security Congress, adversarial exposure validation, autonomous offensive security, small language model, on-premises AI, AI sovereignty, data sovereignty, disconnected environments, federal and military cybersecurity, offensive cyber operationsRead the full story on ITSPmagazine: https://www.itspmagazine.com/blog?p=assail-ships-its-own-ai-model-to-customers-keeping-vulnerability-data-out-of-the-cloud
Get The ITSPmagazine Podcast summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
Random Access Memories
Conversations with tech professionals reveal the personal stories behind their careers in cybersecurity, AI, startups, and leadership.
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Security Now (Video)
A weekly deep dive into cybersecurity news, threats, and defenses with Steve Gibson and Leo Laporte.
The Watchtower
Cybersecurity, data, and AI leaders share candid insights on real-world challenges and innovations beyond the headlines.
Intel at the Edge
Experts discuss emerging technologies and their impact on national security and the intelligence community.
Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure
Expert discussions on cybersecurity, national security, and threats to critical infrastructure like energy and water systems.
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.
Interconnects
Exploring AI advancements through in-depth interviews with scientists and critical analysis of the technology beyond the hype.
The In-Between Tech and Trust Podcast
Explores how technology impacts trust through conversations with experts in business, politics, neuroscience, and tech.
Intelligence Squared
Live debates and in-depth discussions on pressing global issues featuring leading experts and thinkers.
TED Tech
Experts examine how technology reshapes society, science, design, and business through TED Talks hosted by Sherrell Dorsey.
Expert Intelligence with Paul Estes
Explores the intersection of human expertise and AI in shaping the future of work through interviews with industry leaders and innovators.
About The ITSPmagazine Podcast
Founded in 2015, ITSPmagazine began as a vision for a publication positioned at the critical intersection of technology, cybersecurity, and society. What started as a written publication has evolved into a comprehensive repository for all their content—podcasts, articles, event coverage, interviews, videos, panels, and everything they create. This is where Sean Martin and Marco Ciappelli talk about cybersecurity, technology, society, music, storytelling, branding, conference coverage, and whatever else catches their attention. Over a decade of conversations exploring how these worlds collide, influence each other, and shape the human experience. This is where you'll find it all.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from The ITSPmagazine Podcast in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's The ITSPmagazine Podcast daily summary?
It's a free AI-powered email that summarizes new episodes of The ITSPmagazine Podcast as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the The ITSPmagazine Podcast podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official The ITSPmagazine Podcast product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by ITSPmagazine, Sean Martin, Marco Ciappelli.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does The ITSPmagazine Podcast release new episodes?
The ITSPmagazine Podcast publishes daily. Our AI generates a summary within hours of each new episode.
What topics does The ITSPmagazine Podcast cover?
The ITSPmagazine Podcast covers topics including News, Technology, Culture, Society & Culture. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting The ITSPmagazine Podcast summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.