Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

About Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

“Secure & Simple” demystifies governance and compliance challenges faced by CISOs, consultants, and other cybersecurity professionals. The podcast is hosted by Dejan Kosutic, an expert in cybersecurity governance, ISO 27001, NIS2, and DORA. The episodes present topics in an easy-to-understand way and provide you with insight you won’t be able to find elsewhere. To provide comments, suggest topics for the next episodes, or express your interest in participating in the show, contact us at podcast@advisera.com. Learn more about ISO 27001, NIS2, and DORA at https://advisera.com.

Publisher

Dejan Kosutic

Category

business · technology

Language

en

Explicit

No

First episode

8 Apr 2025

Latest episode

6 Oct 2026

Latest episodes

45 episodes in the feed.

1. 

   6 Oct 2026

   Strategic Human Firewall: Overcoming the Human Blind Spot | Interview with Robert Siciliano

   In this Secure and Simple Podcast episode, host Dejan Kosutic (Advisera) interviews Robert Siciliano, co-founder of ProtectNow and author of Strategic Human Firewall, about why organizations must address the “human blind spot” - people’s psychological need to trust that attackers exploit through impersonation, social engineering, and manufactured urgency. Siciliano explains why phishing simulations alone are not true security awareness training and introduces the AAA protocol (Analyze, Authenticate, Act) with out-of-band verification to stop scams like fake PayPal charges or CEO payment requests. He argues companies should build a “strategic human firewall” by shifting employees from passive targets to active detection layers through scalable, interactive dialogue (e.g., all-hands Q&A) that teaches personal security first, improving engagement and security behaviors measurable through better phishing results and increased adoption of practices like unique passcodes and password managers. Links from the episode: - Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software (https://advisera.co/Conformio-software) - White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits (https://advisera.co/page-all-toolkits) - Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: https://advisera.co/Consultant-Courses (https://advisera.co/Consultant-Courses) - Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account (https://advisera.co/page-Company-Training-Account) - Beginner's Course for ISO, Cybersecurity, and AI Consultants: https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t (https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t) - How to Grow Your Cybersecurity, ISO, or AI Consultancy: Advanced Course:https://advisera.co/GrowYourConsultancyTraining (https://advisera.co/GrowYourConsultancyTraining) (00:00) - Interview with Robert Siciliano (01:20) - Beyond Phishing Training (04:10) - Understanding Human Blind Spot (08:27) - Manufactured Urgency Scams (11:28) - AAA - Analyze, Authenticate, Act (18:27) - CEO Fraud and Verification (22:56) - Building Strategic Human Firewall (30:28) - Getting Companies Onboard (38:00) - Security vs Paranoia (40:03) - Humanize the CISO (42:09) - Measuring Behavior Change (48:06) - Resources for Security Professionals

2. 

   22 Sept 2026

   How to Integrate Security Controls Across ISO 27001, NIST & SOC 2 | Interview with Aron Lange

   In this episode of Secure and Simple Podcast, host Dejan Kosutic (Advisera) speaks with Aaron Lange (GRC Lab, TÜV SÜD auditor) about combining security controls across multiple standards and frameworks, including ISO 27001/27002, NIST Cybersecurity Framework, NIST SP 800-53 and 800-171, TISAX, C5, SOC 2, and sector-specific regimes like PCI DSS and CMMC. They clarify the difference between requirements and controls, and how to handle cross-mapping, gap analysis, scoping, and phased implementation when adding frameworks. They discuss how standards typically complement rather than contradict each other (e.g., NIS2 incident reporting timelines) and why starting with a generic ISMS like ISO 27001 before adding specific frameworks often works best, illustrated by a startup achieving ISO 27001 and then C5 attestation. They also examine the purpose and common shortcomings of the ISO 27001 Statement of Applicability and close with advice to avoid perfectionism, start, and iterate. Links from the episode: - Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software (https://advisera.co/Conformio-software) - White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits (https://advisera.co/page-all-toolkits) - Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: https://advisera.co/Consultant-Courses (https://advisera.co/Consultant-Courses) - Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account (https://advisera.co/page-Company-Training-Account) - Beginner's Course for ISO, Cybersecurity, and AI Consultants: https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t (https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t) - How to Grow Your Cybersecurity, ISO, or AI Consultancy: Advanced Course:https://advisera.co/GrowYourConsultancyTraining (https://advisera.co/GrowYourConsultancyTraining) (00:00) - Interview Aron Lange (01:29) - Requirements vs Controls (03:14) - NIST 800-53 vs 800-171 (06:46) - C5 And TISAX Deep Dive (10:38) - Control Mapping Across Standards (14:34) - One Integrated ISMS (19:59) - Pick A Core Standard (23:32) - Scoping And Real Examples (29:48) - Statement Of Applicability (43:37) - Free Resources for Security Professionals

3. 

   8 Sept 2026

   Security as a Business Enabler: From Cyber Risk to Action | Interview with Matthew Webster

   Dejan Kosutic hosts Matthew Webster, founder and CEO of Cyvergence, to explain what “security as a business enabler” means in practice: aligning cybersecurity with business operations, priorities, and decision-making rather than siloed technical metrics. Webster emphasizes using business impact analysis, scenario analysis, and cost-benefit thinking to translate vulnerabilities into operational risk executives understand, including concepts like materiality and value at risk. He discusses how security can enable revenue through third-party/supply-chain risk expectations, certifications, and better governance, and how CISOs can overcome gaps in business understanding by learning business language, building trust, and collaborating with legal, HR, finance, and risk leaders. The episode also covers balancing speed, innovation, and acceptable risk, including AI guardrails, storytelling, and a “work towards yes” approach. Links from the episode: - Conformio software to streamline and scale ISO 27001 implementation and maintenance for your clients: https://advisera.co/Conformio-software (https://advisera.co/Conformio-software) - White label documentation toolkits for NIS2, DORA, ISO 27001, and other ISO standards to create all the required documents for your clients: https://advisera.co/page-all-toolkits (https://advisera.co/page-all-toolkits) - Accredited Lead Auditor and Lead Implementer courses for various standards and frameworks to show your expertise to potential clients: https://advisera.co/Consultant-Courses (https://advisera.co/Consultant-Courses) - Company Training Academy with numerous videos for NIS2, DORA, ISO 27001, and other frameworks to organize training and awareness programs for your client’s workforce: https://advisera.co/page-Company-Training-Account (https://advisera.co/page-Company-Training-Account) - Beginner's Course for ISO, Cybersecurity, and AI Consultants: https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t (https://www.youtube.com/playlist?list=PLHwD3nQun7caKFq80LxNNYKIabATlyA7t) - How to Grow Your Cybersecurity, ISO, or AI Consultancy: Advanced Course:https://advisera.co/GrowYourConsultancyTraining (https://advisera.co/GrowYourConsultancyTraining) (00:00) - Interview with 1043 Matthew Webster (00:56) - Security as Business Enabler (04:50) - From Cyber to Operational Risk (08:18) - Revenue and Third Party Risk (11:32) - Scenario Storytelling (13:48) - CISOs Learn Business (21:33) - Mission Critical Objectives (26:00) - Balancing Speed and Controls (29:31) - Innovation and AI Guardrails (34:41) - Human Trust and Stories (38:24) - Resources for Security Professionals

Who has been a guest on Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

Names identified in recent episode analyses. Showing up to five guests.

• Jared Leuschen
• Sasa Jusic
• Jim Moran
• Carlos Cruz
• Steve Winterfeld

Reach and audience

Public platform figures. Ratings count people who left a rating, not total listeners.

Spotify

5.0 / 5

3 ratings

Podcast Authority Score: 54 / 100

A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.

Quality

94

Social presence

0

YouTube

0

Engagement

32

Contact Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance

Guest appearances

Books guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.

Questions about Secure & Simple — Podcast for Consultants and vCISOs on Cybersecurity Governance and Compliance