Where can I listen to this podcast?

This podcast is available on 4 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.

Does this podcast accept guests?

Yes, this podcast regularly features guests.

Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

Claim This Podcast

by Dejan Kosutic

5.0(3 reviews)

39 episodes

Updated Daily

Accepts GuestsHas SponsorsLocation 🇪🇺

Podcast Authority

Beta

FairBased on show quality, social media presence, reviews, charts, and more

Quality94

Social0

YouTube0

Engagement32

Learn more

Podcast Overview

“Secure & Simple” demystifies governance and compliance challenges faced by CISOs, consultants, and other cybersecurity professionals. The podcast is hosted by Dejan Kosutic, an expert in cybersecurity governance, ISO 27001, NIS2, and DORA. The episodes present topics in an easy-to-understand way and provide you with insight you won’t be able to find elsewhere. To provide comments, suggest topics for the next episodes, or express your interest in participating in the show, contact us at podcast@advisera.com. Learn more about ISO 27001, NIS2, and DORA at https://advisera.com.

Language

🇺🇲

Publishing Since

4/8/2025

Visit Website View on Apple Podcasts RSS Feed

🇺🇸 Charts #3

Outreach generated

Apple 142

Spotify 827

Instant mention tracking

Perfect fit!

Unlock The Full Podcast Authority Score Report

See how your podcast performs across key metrics

Podcast Authority

Beta

FairBased on show quality, social media presence, reviews, charts, and more

Quality94

Social0

YouTube0

Engagement32

Learn more

Excellent Areas

Good Performance

Growth Opportunities

excellent

Episode Length

51 minutes

Performing excellently!

good

Publishing Consistency

Every 9 days

Recommendations available

Unlock the full report to see detailed tips

poor

Episode Thumbnails

Recommendations available

Unlock the full report to see detailed tips

+16 More Metrics

Unlock comprehensive insights including:

• YouTube presence analysis
• Social media reach metrics
• RSS compliance scoring
• Podcast 2.0 features
• Technical standards

What's Included in Your Full Report

Detailed Analytics

Complete breakdown of all 19 authority metrics
Personalized recommendations for each metric
Industry benchmarks and comparisons
Technical RSS feed analysis and compliance scoring

Growth Strategies

Step-by-step action plans for improvement
Quick wins to boost your score immediately
Pro tips from successful podcasters

Get your free podcast insights report

See how your show performs across every key metric

Instant delivery

No spam

Attract Better Guests

High authority scores make your podcast more attractive to industry leaders and influencers who want to appear on credible shows.

Secure Sponsorships

Sponsors look for podcasts with proven authority and engagement. Your score demonstrates your podcast's value to potential partners.

Grow Your Audience

Understanding your strengths and weaknesses helps you make data-driven decisions to expand your listener base effectively.

1 verified contact email on file for Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

Pitch yourself as a guest, propose sponsorships, or reach out directly to the host.

See contact details

Recent Episodes

July 14, 2026

How Hackers Exploit Human Bias and Technical Weaknesses | Interview with Kevin Beaver

In this Secure and Simple Podcast episode, host Dejan Kosutic interviews independent information security consultant and Hacking for Dummies author Kevin Beaver about how hackers are often underestimated and how many run operations like a professional business. Beaver explains psychology concepts that affect security decisions, including the Dunning-Kruger effect, sunk cost fallacy, bystander apathy, expediency, myopia, cognitive dissonance, and confirmation bias, and how these lead to shortcuts, unchecked assumptions, and missed risks. He shares what he looks for first in penetration tests, and discusses how AI is changing phishing and vulnerability exploitation, potential future AI-on-AI attacks, the problem of executive policy exemptions, and ways to build security culture through business-focused reporting to leadership. Links from the episode: - Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: <a href="https://advisera.co/Conformio-software">https://advisera.co/Conformio-software</a> - White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: <a href="https://advisera.co/page-all-toolkits">https://advisera.co/page-all-toolkits </a> - Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: <a href="https://advisera.co/Consultant-Courses">https://advisera.co/Consultant-Courses</a> - Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: <a href="https://advisera.co/page-Company-Training-Account">https://advisera.co/page-Company-Training-Account</a> - Beginner's Course for ISO, Cybersecurity, and AI Consultants: <a href="https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t">https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t</a> - How to Grow Your Cybersecurity, ISO, or AI Consultancy: Advanced Course:<a href="https://advisera.co/GrowYourConsultancyTraining">https://advisera.co/GrowYourConsultancyTraining</a> <ul><li>(00:00) - Interview with Kevin Beaver</li> <li>(01:15) - What People Misjudge About Hackers</li> <li>(03:42) - Psychology Meets Cybersecurity</li> <li>(10:26) - Expediency and Security Shortcuts</li> <li>(12:45) - Pen Testing Basics and Old Patches</li> <li>(19:51) - Do Hackers Think the Same Way</li> <li>(22:41) - AI Exploits Rising</li> <li>(25:41) - AI Governance Reality Check</li> <li>(31:01) - Confirmation Bias in Security</li> <li>(34:23) - Culture Drives Cleaner Pen Tests</li> <li>(37:20) - Reporting to Boards That Works</li> <li>(40:35) - Three Steps to Preparedness</li> <li>(43:35) - Defensible Security Approach</li> <li>(44:09) - Free Resources for Security Professionals</li> </ul>

June 30, 2026

How CISOs Should Talk to Corporate Boards | Interview with Michelle Drolet

In this Secure and Simple Podcast episode, host Dejan Kosutic (Advisera) interviews Michelle Drolet, CEO and founder of Towerwall, about communicating cybersecurity to corporate boards. Drolet says boards often don’t know what questions to ask, so CISOs should drive the agenda by focusing on incident impact, business risk, and alignment to strategic initiatives rather than vulnerabilities or technical tools. She recommends concise, ROI- and compliance-oriented metrics tied to dollars-and-cents outcomes, limiting “blast radius,” and protecting critical data, while avoiding overly detailed dashboards. She emphasizes having a cybersecurity advocate on the board, running interactive tabletop exercises, addressing cyber as a business enabler affecting sales, insurance, and vendor risk, and using frameworks and regulations as measurable KPIs. The discussion also covers AI adoption with guardrails, CISO reporting lines, and future pressures like quantum planning.Links from the episode: - Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: <a href="https://advisera.co/Conformio-software">https://advisera.co/Conformio-software</a> - White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: <a href="https://advisera.co/page-all-toolkits">https://advisera.co/page-all-toolkits </a> - Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: <a href="https://advisera.co/Consultant-Courses">https://advisera.co/Consultant-Courses</a> - Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: <a href="https://advisera.co/page-Company-Training-Account">https://advisera.co/page-Company-Training-Account</a> - Beginner's Course for ISO, Cybersecurity, and AI Consultants: <a href="https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t">https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t</a> - How to Grow Your Cybersecurity, ISO, or AI Consultancy: Advanced Course:<a href="https://advisera.co/GrowYourConsultancyTraining">https://advisera.co/GrowYourConsultancyTraining</a> <ul><li>(00:00) - Interview with Michelle Drolet</li> <li>(00:55) - Driving The Board Agenda</li> <li>(02:31) - Build Program Around Strategy</li> <li>(05:06) - Tabletop Exercises For Engagement</li> <li>(08:01) - Finding A Board Advocate</li> <li>(09:34) - Cyber As Business Enabler</li> <li>(13:36) - Security Reporting and Metrics</li> <li>(19:39) - Answering Are We Secure</li> <li>(26:01) - Frameworks And Compliance As KPIs</li> <li>(34:18) - Future CISO Quantum Planning</li> <li>(36:10) - vCISO Lessons And Board Comms</li> <li>(40:26) - Resources for Security Professionals</li> </ul>

June 16, 2026

Why Conventional Cybersecurity Won’t Protect AI? | Interview with Hugo Huang

In this Secure & Simple Podcast episode, host Dejan Kosutic (Advisera) talks with Hugo Huang, Product Director at Canonical and author of a Harvard Business Review article, about why conventional cybersecurity tools and patching alone are insufficient for AI systems. Huang shares research conducted with Canonical, IDC, and Google Cloud, highlighting leaders’ concerns about shadow AI usage, opaque and costly AI agents, and securing new hardware like GPUs, IPUs, and TPUs. They discuss AI-specific threats such as data poisoning, adversarial prompting, and model inversion attacks. Huang argues for hardening architecture with confidential computing (e.g., Intel TDX, AMD SEV, Nvidia H100) and for managerial changes, including CEO-level ownership, HR planning for scarce AI-security talent, supplier strategy to avoid vendor lock-in, and using frameworks like NIST’s AI risk management framework to guide policies and governance.Links from the episode: - Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: <a href="https://advisera.co/Conformio-software">https://advisera.co/Conformio-software</a> - White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: <a href="https://advisera.co/page-all-toolkits">https://advisera.co/page-all-toolkits </a> - Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: <a href="https://advisera.co/Consultant-Courses">https://advisera.co/Consultant-Courses</a> - Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: <a href="https://advisera.co/page-Company-Training-Account">https://advisera.co/page-Company-Training-Account</a> - Beginner's Course for ISO, Cybersecurity, and AI Consultants: <a href="https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t">https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t</a> - How to Grow Your Cybersecurity, ISO, or AI Consultancy: Advanced Course:<a href="https://advisera.co/GrowYourConsultancyTraining">https://advisera.co/GrowYourConsultancyTraining</a> <ul><li>(00:00) - Interview with Hugo Huang</li> <li>(04:34) - Three Executive Fears</li> <li>(07:58) - New AI Attack Types</li> <li>(11:59) - Patching Is Not Enough</li> <li>(14:33) - Confidential Computing Basics</li> <li>(17:00) - TPUs Market Shift</li> <li>(19:46) - Management Must Change</li> <li>(28:26) - Security Protects Brand</li> <li>(33:34) - Suppliers Vendor Lock-in</li> <li>(41:31) - Advisera Resources</li> </ul>

39 total episodes available

Recent guests on Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

Guests from recent episodes — sign up to see every guest that has ever appeared on this show.

Jared Leuschen

Guest

Sasa Jusic

Guest

Jim Moran

Guest

Carlos Cruz

Guest

Steve Winterfeld

Guest

Paul C Dwyer

Guest

Aruneesh Salhotra

Guest

Thom Langford

Guest

George Kesteven

Guest

John Verry

Guest

Terry Ziemniak

Guest

Alexander Jaber

Guest

See every guest on Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

Similar Podcasts

Discover related shows you might enjoy

Cyber Security Headlines

CISO Series

CyberWire Daily

N2K Networks

Deep-dive analytics for Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

Frequently asked questions

Have a different question and can't find the answer you're looking for? Reach out to our support team by sending us an email and we'll get back to you as soon as we can.

What is Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance?: “Secure & Simple” demystifies governance and compliance challenges faced by CISOs, consultants, and other cybersecurity professionals. The podcast is hosted by Dejan Kosutic, an expert in cybersecurity governance, ISO 27001, NIS2, and DORA. The episodes present topics in an easy-to-understand way and provide you with insight you won’t be able to find elsewhere.

To provide comments, suggest topics for the next episodes, or express your interest in participating in the show, contact us at podcast@advisera.com.

Learn more about ISO 27001, NIS2, and DORA at https://advisera.com.
How often does this podcast release new episodes?: This podcast updates daily.
Where can I listen to this podcast?: This podcast is available on 4 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.
Does this podcast accept guests?: Yes, this podcast regularly features guests.

Legal Disclaimer

Pod Engine is not affiliated with, endorsed by, or officially connected with any of the podcasts displayed on this platform. We operate independently as a podcast discovery and analytics service.

All podcast artwork, thumbnails, and content displayed on this page are the property of their respective owners and are protected by applicable copyright laws. This includes, but is not limited to, podcast cover art, episode artwork, show descriptions, episode titles, transcripts, audio snippets, and any other content originating from the podcast creators or their licensors.

We display this content under fair use principles and/or implied license for the purpose of podcast discovery, information, and commentary. We make no claim of ownership over any podcast content, artwork, or related materials shown on this platform. All trademarks, service marks, and trade names are the property of their respective owners.

While we strive to ensure all content usage is properly authorized, if you are a rights holder and believe your content is being used inappropriately or without proper authorization, please contact us immediately at hey@podengine.ai for prompt review and appropriate action, which may include content removal or proper attribution.

By accessing and using this platform, you acknowledge and agree to respect all applicable copyright laws and intellectual property rights of content owners. Any unauthorized reproduction, distribution, or commercial use of the content displayed on this platform is strictly prohibited.