SC Media and tenable are proud to present this month's CISO Stories program, where CISOs share tales from the trenches and unpack leadership lessons learned along the way. Hosted by Jessica Hoffman.
Beyond the CVE Count: The Real State of Vulnerability Management - Charles Loring - CSP #228
Vulnerability management isn't just about finding more vulnerabilities—it's about knowing what matters and having the resources to act. Chuck Loring of the Lee County Clerk of Circuit Court & Comptroller joins CISO Stories to explore how budgets, staffing, legacy technology, and mission priorities shape vulnerability management across the public and private sectors. We challenge the idea that AI alone will solve the problem and discuss where it can actually make a difference. Chuck shares his perspective on risk-based prioritization as vulnerability volumes continue to surge. The conversation also examines what public and private organizations can learn from each other. Ultimately, effective vulnerability management isn't about patching everything—it's about identifying and addressing what poses the greatest risk.
Segment Resources:
https://cybersecconsultingleaders.com/blog
Visit https://cisostoriespodcast.com for all the latest episodes!
Show Notes: https://cisostoriespodcast.com/csp-228
10 Aug 2026
Attack Surface Management - Matt Lea - CSP #227
In this episode of CISO Stories, Jessica Hoffman sits down with Matt Lee to explore attack surface management, AWS security, and the cloud misconfigurations that can put organizations at risk.
Matt shares lessons from his experience auditing cloud environments, including common AWS security gaps around identity and access management, exposed resources, security groups, and overly permissive access. The conversation also covers emerging challenges around AI agents, protecting production data, and balancing speed of innovation with security controls.
From preventing cloud breaches to building stronger security practices, Matt breaks down what organizations should understand about reducing risk in today's evolving threat landscape.
Segment Resources:
https://schematical.com/techdebt https://www.oreilly.com/videos/zero-to-hero/0642572107789/ https://schematical.com/posts https://schematical.com/free https://schematical.com/speaking
This segment is sponsored by Horizon3. Visit https://cisostoriespodcast.com/horizon3 to learn more about them!
Visit https://cisostoriespodcast.com for all the latest episodes!
Show Notes: https://cisostoriespodcast.com/csp-227
13 Jul 2026
Cloud Security Meets AI: What CISOs Need to Govern Before They Scale - Brent Neal - CSP #226
AI is changing cloud security fast, but the biggest challenge is not just adoption. It is governance. In this episode, Jess sits down with Brent Neil, CISO at RapidScale, to talk about what CISOs should be watching as AI becomes embedded in cloud environments, business workflows, and sensitive data systems. Brent shares practical insight on AI governance, identity and access, cloud security controls, and the risks that emerge when experimentation moves into production. The conversation explores how security leaders can support innovation without losing visibility, accountability, or trust. Brent also breaks down the questions CISOs should be asking before AI tools scale deeper into the enterprise. Because AI may be unavoidable, but unmanaged AI risk is optional.
Segment Resources:
RapidScale's IT Talent Gap Report: https://try.rapidscale.net/the-talent-gap/
This segment is sponsored by Arctic Wolf. Visit https://cisostoriespodcast.com/arcticwolf to learn more about them!
Visit https://cisostoriespodcast.com for all the latest episodes!
Show Notes: https://cisostoriespodcast.com/csp-226
Who has been a guest on CISO Stories Podcast (Audio)
Names identified in recent episode analyses. Showing up to five guests.
Kevin Nikkhoo
Yogita Parulekar
Danielle Ruderman
Erika Dean
Mandy Andress
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Apple Podcasts (US)
4.4 / 5
13 ratings
Spotify
4.0 / 5
6 ratings
Podcast Authority Score: 66 / 100
A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.
Quality
97
Social presence
0
YouTube
0
Engagement
90
Contact CISO Stories Podcast (Audio)
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
