Welcome to Future of Data Security, the podcast where industry leaders come together to share their insights, lessons, and strategies on the forefront of data security. Each episode features in-depth interviews with top CISOs and security experts who discuss real-world solutions, innovations, and the latest technologies that are shaping the future of cybersecurity across various industries. Join us to gain actionable advice and stay ahead in the ever-evolving world of data security.

Future of Data Security
Claim This Podcastby Qohash
Podcast Authority
Beta
Podcast Overview
Welcome to Future of Data Security, the podcast where industry leaders come together to share their insights, lessons, and strategies on the forefront of data security. Each episode features in-depth interviews with top CISOs and security experts who discuss real-world solutions, innovations, and the latest technologies that are shaping the future of cybersecurity across various industries. Join us to gain actionable advice and stay ahead in the ever-evolving world of data security.
Language
🇺🇲
Publishing Since
9/3/2024
Unlock The Full Podcast Authority Score Report
See how your podcast performs across key metrics
Podcast Authority
Beta
Recommendations available
Unlock the full report to see detailed tips
Recommendations available
Unlock the full report to see detailed tips
Unlock comprehensive insights including:
- • YouTube presence analysis
- • Social media reach metrics
- • RSS compliance scoring
- • Podcast 2.0 features
- • Technical standards
Detailed Analytics
- Complete breakdown of all 19 authority metrics
- Personalized recommendations for each metric
- Industry benchmarks and comparisons
- Technical RSS feed analysis and compliance scoring
Growth Strategies
- Step-by-step action plans for improvement
- Quick wins to boost your score immediately
- Pro tips from successful podcasters
See how your show performs across every key metric
High authority scores make your podcast more attractive to industry leaders and influencers who want to appear on credible shows.
Sponsors look for podcasts with proven authority and engagement. Your score demonstrates your podcast's value to potential partners.
Understanding your strengths and weaknesses helps you make data-driven decisions to expand your listener base effectively.
1 verified contact email on file for Future of Data Security
Pitch yourself as a guest, propose sponsorships, or reach out directly to the host.
Recent Episodes

March 10, 2026
EP 31 — Arbor Memorial's Teij Janki on why adding AI before fixing process amplifies weaknesses
<p><a href="https://www.linkedin.com/in/tjanki/"><u>Teij Janki</u></a>, CISO & Director of IT Governance Risk & Compliance at <a href="https://www.arbormemorial.ca/en.html?utm_source=LinkedIn&utm_medium=SocialMedia&utm_campaign=LinkedIn"><u>Arbor Memorial</u></a>, has spent 30 years moving through the full stack of security, and his view is that the sequencing most teams follow is backwards. His principle is that technology does not solve processes, it amplifies them. That means deploying a tool before fixing the underlying process weakness just scales the problem. The implication for AI adoption is direct and worth hearing spelled out.</p><p>On the budget side, Teij makes a case that privacy legislation is a more reliable governance lever than cybersecurity risk alone because privacy laws carry consequences that executive teams will actually act on. He also walks through the gating sequence his team built for AI tool adoption wherein sensitive data gets slowed down and scrutinized, lower-sensitivity use cases move through faster, and staff have a service catalog to work from rather than a blanket ban. </p><p><strong>Topics discussed:</strong></p><ul><li><p>Applying a people-process-technology sequence to security programs before introducing AI or automation tooling</p></li><li><p>Using privacy legislation as an executive governance lever when cybersecurity risk alone fails to drive budget decisions</p></li><li><p>Building a gating sequence for AI tool adoption that separates sensitive from low-sensitivity data use cases</p></li><li><p>Replacing blanket AI bans with a structured service catalog that lets staff self-select and move tools through approval</p></li><li><p>Identifying process weaknesses before deploying technology to avoid amplifying existing security vulnerabilities at scale</p></li><li><p>Progressing security from a technical cost center to a strategic business enabler using the CMMI maturity model</p></li><li><p>Applying martial arts principles of discipline, clear expectations, and target-setting to cybersecurity team leadership</p></li><li><p>Evaluating where generative AI delivers in security operations versus where magical thinking still outpaces real-world performance</p></li></ul>

February 24, 2026
EP 30 — Postman's Sam Chehab on Three Unteachable Traits He Hires For
<p>At <a href="https://www.postman.com/"><u>Postman</u></a>'s scale of 40 million developers generating billions of API requests, <a href="https://www.linkedin.com/in/schehab/"><u>Sam Chehab</u></a>, Head of Security & IT, centers on three enforcement domains: authenticated and encrypted data paths, zero-trust inter-service communication, and runtime instrumentation. His vendor evaluation is just as precise, cutting past feature lists to one demand: show me the architecture diagram and walk through exactly how your solution addresses my threat models.</p><p>Sam identifies why generative AI creates fundamentally new risk: the combination of private data access, untrusted content processing, and external communication capability. This trifecta explains why browser-based AI is nearly impossible to contain; it touches local machines, queries the open web, and executes actions on your behalf. Sam also covers how he screens for three traits he can't train: initiative to self-direct research, attitude to absorb constant setbacks, and aptitude to process how rapidly this field moves.</p><p><strong>Topics discussed:</strong></p><ul><li><p>Implementing data path integrity, zero-trust inter-service authentication, and runtime instrumentation with immutable logs</p></li><li><p>Evaluating cybersecurity vendors by demanding architecture diagrams and specific threat model solutions rather than feature lists</p></li><li><p>Managing freemium platform security with anomaly detection, rate limiting, and abuse prevention across 40 million developers</p></li><li><p>Identifying AI security's dangerous trifecta: private data access, untrusted content processing, and external communication capabilities </p></li><li><p>Building MCP generators that enable least-privilege API servers by allowing developers to select only required methods before deployment</p></li><li><p>Using AI agents to generate security tests during development, shifting validation from security teams to automated testing</p></li><li><p>Applying security hygiene fundamentals before adopting specialized vendor solutions</p></li><li><p>Hiring security teams based on three unteachable traits: initiative, attitude, and aptitude</p></li></ul>

February 10, 2026
EP 29 — Age of Learning's Carl Stern on Why Certifications Are Side Effects, Not Final Goals
<p><a href="https://www.linkedin.com/in/carlstern/"><u>Carl Stern</u></a>, VP of Information Security at <a href="https://www.ageoflearning.com/"><u>Age of Learning</u></a>, explains why forcing controls into place without executive alignment guarantees you'll fight uphill battles every single day, as people begin to see security as a blocker rather than a business enabler. Instead, he starts with identifying crown jewels and acceptable risk levels before selecting any frameworks or tools, ensuring the program fits company culture instead of working against it. </p><p>He also asserts that certifications like HITRUST and SOC 2 validate you're already operating securely; the real program is the daily processes people follow because they understand why, not compliance theatre. Carl also argues the cybersecurity industry exists at its current scale because of a systemic failure: companies ship insecure software without liability, pushing security costs downstream. Most breaches exploit preventable defects that should never reach production, not sophisticated zero-days. </p><p><strong>Topics discussed:</strong></p><ul><li><p>Building security programs from scratch versus inheriting existing programs and why executive alignment prevents daily uphill battles</p></li><li><p>Treating certifications as validation of operational security rather than the primary program goal</p></li><li><p>Pairing administrative controls with technical monitoring to establish baselines before enforcement for unstructured data security policies</p></li><li><p>Applying three-part investment calculus for lean teams: measurable risk reduction, manual work automation, and crown jewel protection</p></li><li><p>Calculating true cost of 24/7 internal SOC coverage including shift staffing, turnover, training, and tooling versus managed services</p></li><li><p>Why attack patterns remain consistent across healthcare, education, gaming, and retail despite different compliance requirements</p></li><li><p>Explaining how AI lowers the barrier for exploit development and expands zero-day risk beyond traditional high-value enterprise targets</p></li><li><p>Arguing that the cybersecurity industry exists at current scale because companies ship insecure software without liability, pushing costs downstream</p></li></ul>
35 total episodes available
Deep-dive analytics for Future of Data Security
Frequently asked questions
Have a different question and can't find the answer you're looking for? Reach out to our support team by sending us an email and we'll get back to you as soon as we can.
- What is Future of Data Security?
- How often does this podcast release new episodes?
This podcast updates daily.
- Where can I listen to this podcast?
This podcast is available on 4 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.
- Does this podcast accept guests?
No, this podcast does not typically feature guests.
Legal Disclaimer
Pod Engine is not affiliated with, endorsed by, or officially connected with any of the podcasts displayed on this platform. We operate independently as a podcast discovery and analytics service.
All podcast artwork, thumbnails, and content displayed on this page are the property of their respective owners and are protected by applicable copyright laws. This includes, but is not limited to, podcast cover art, episode artwork, show descriptions, episode titles, transcripts, audio snippets, and any other content originating from the podcast creators or their licensors.
We display this content under fair use principles and/or implied license for the purpose of podcast discovery, information, and commentary. We make no claim of ownership over any podcast content, artwork, or related materials shown on this platform. All trademarks, service marks, and trade names are the property of their respective owners.
While we strive to ensure all content usage is properly authorized, if you are a rights holder and believe your content is being used inappropriately or without proper authorization, please contact us immediately at hey@podengine.ai for prompt review and appropriate action, which may include content removal or proper attribution.
By accessing and using this platform, you acknowledge and agree to respect all applicable copyright laws and intellectual property rights of content owners. Any unauthorized reproduction, distribution, or commercial use of the content displayed on this platform is strictly prohibited.