SC Media and tenable are proud to present this month's CISO Stories program, where CISOs share tales from the trenches and unpack leadership lessons learned along the way. Hosted by Jessica Hoffman.
The threat landscape is too massive to treat every vulnerability, control gap, and exposure as equally urgent. In this episode, Heather joins us to explore how exposure management is changing the way organizations prioritize and report cyber risk.
Instead of starting with control effectiveness, teams can begin with key risk indicators: What is actually exposed? What threats are real, tangible, and imminent? What could have the greatest business impact?
From there, organizations can tie those risks back to the controls designed to reduce them. It's a shift from asking "Are our controls working?" to "Are we reducing the risks that matter most?"
Segment Resources: https://www.linkedin.com/pulse/from-green-dashboards-real-exposure-security-kri-framework-ceylan-ho2yc/
This is our final episode of the CISO Stories podcast. Thank you to host Jessica Hoffman, to creator & host Todd Fitzgerald, and most of all, to our audience for tuning in.
Show Notes: https://cisostoriespodcast.com/csp-229
14 Sept 2026
Beyond the CVE Count: The Real State of Vulnerability Management - Charles Loring - CSP #228
Vulnerability management isn't just about finding more vulnerabilities—it's about knowing what matters and having the resources to act. Chuck Loring of the Lee County Clerk of Circuit Court & Comptroller joins CISO Stories to explore how budgets, staffing, legacy technology, and mission priorities shape vulnerability management across the public and private sectors. We challenge the idea that AI alone will solve the problem and discuss where it can actually make a difference. Chuck shares his perspective on risk-based prioritization as vulnerability volumes continue to surge. The conversation also examines what public and private organizations can learn from each other. Ultimately, effective vulnerability management isn't about patching everything—it's about identifying and addressing what poses the greatest risk.
Segment Resources:
https://cybersecconsultingleaders.com/blog
Show Notes: https://cisostoriespodcast.com/csp-228
10 Aug 2026
Attack Surface Management - Matt Lea - CSP #227
In this episode of CISO Stories, Jessica Hoffman sits down with Matt Lee to explore attack surface management, AWS security, and the cloud misconfigurations that can put organizations at risk.
Matt shares lessons from his experience auditing cloud environments, including common AWS security gaps around identity and access management, exposed resources, security groups, and overly permissive access. The conversation also covers emerging challenges around AI agents, protecting production data, and balancing speed of innovation with security controls.
From preventing cloud breaches to building stronger security practices, Matt breaks down what organizations should understand about reducing risk in today's evolving threat landscape.
Segment Resources:
https://schematical.com/techdebt https://www.oreilly.com/videos/zero-to-hero/0642572107789/ https://schematical.com/posts https://schematical.com/free https://schematical.com/speaking
This segment is sponsored by Horizon3. Visit https://cisostoriespodcast.com/horizon3 to learn more about them!
Show Notes: https://cisostoriespodcast.com/csp-227
Who has been a guest on CISO Stories Podcast (Video)
Names identified in recent episode analyses. Showing up to five guests.
Kevin Nikkhoo
Yogita Parulekar
Danielle Ruderman
Erika Dean
Mandy Andress
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Apple Podcasts (US)
5.0 / 5
1 ratings
Podcast Authority Score: 42 / 100
A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.
Quality
64
Social presence
0
YouTube
0
Engagement
51
Host of CISO Stories Podcast (Video)?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
