As autonomous AI systems introduce advanced business capabilities, they also create unprecedented security vulnerabilities such as prompt injection, malicious tool misuse, and machine-speed exploitation. To defend against these novel threats, organizations must move beyond traditional friction-based security and adopt a Zero Trust framework that relies on hard barriers, cryptographic identities, and continuous verification. This episode breaks down how to practically apply core concepts like "least agency" across a three-tier security maturity model to safeguard your enterprise's agentic AI deployments.
 
Sponsors
www.cisomarketplace.services/program
https://vibehack.dev
 

As artificial intelligence workloads push facilities to their absolute thermal and networking limits, securing the underlying physical and digital infrastructure is more critical than ever before. This episode dives deep into the FORGE framework's top security risks—exploring everything from firmware vulnerabilities to physical facility management—while detailing how rigorous SSAE 18 and SSAE 21 audits hold cloud providers and subservice organizations accountable. Join us as we unpack the critical strategies and compliance standards organizations must deploy to ensure their high-value AI assets remain protected against sophisticated physical and cyber threats.
 
Sponsors:
www.cisomarketplace.com
https://ssaephysicalsecurity.com

This episode explores the turbulent 2026 landscape of the NIS2 Directive, a period defined by the European Commission actively suing member states like France, Ireland, Spain, and the Netherlands for delayed transposition. We dive into the harsh new realities of corporate enforcement, highlighting the first wave of administrative fines and the direct personal penalties now hitting executives who fail to oversee cyber risk. Finally, we unpack the recently proposed targeted amendments, which aim to ease the regulatory burden by introducing a "small mid-cap" category and standardizing ransomware reporting across the EU.
 
Sponsor:
www.compliancehub.wiki
www.myprivacy.blog

This podcast dives into the European Union's Digital Operational Resilience Act (DORA), exploring how financial institutions must shift their focus from traditional cybersecurity to comprehensive operational resilience. We unpack the regulation's rigorous technical standards, offering practical insights on managing third-party risks via the Register of Information (RoI), meeting strict incident reporting deadlines, and preparing for Threat-Led Penetration Testing (TLPT). Listeners will discover strategic blueprints for mapping existing frameworks like ISO 27001 to DORA, automating compliance, and securing the financial supply chain against evolving cyber threats.
 
Sponsor:
www.cisomarketplace.com
www.compliancehub.wiki

Join us as we explore how NovaCustom's PrivacyGuard and SecurityTitan product lines are redefining digital sovereignty through open-source Dasharo coreboot firmware and physical anti-tamper security. We dive deep into their customized hardware solutions, contrasting the effortless privacy of Zorin OS Pro for everyday users with the extreme, hardware-enforced isolation of Qubes OS for high-risk targets. Whether you are a business looking to deploy secure mobile communications with the SHIFTphone 8.1 or an advanced user requiring verifiable boot attestation, this episode breaks down the tools you need to truly own your tech.
https://cisomarketplace.com/blog/hardware-trust-by-role-network-reading-guide
 
Sponsor
Buy Direct NovaCustom
Sponsor 2rd Place August 5th at The Wynn Las Vegas CISO.POKER
By SecurityGadgets - NovaCustom

Dive into the world of uncompromising digital privacy with a comprehensive look at Nitrokey's open-source security hardware. From GrapheneOS-hardened NitroPhones and Qubes-certified laptops to enterprise-grade network firewalls and private home clouds, we explore how to build a truly sovereign tech stack. Whether you are securing a small business, protecting cryptocurrency assets, or locking down enterprise server keys with a NetHSM, this episode covers the tools you need to take back control of your digital life.
https://cisomarketplace.com/blog/hardware-trust-by-role-network-reading-guide
 
Sponsor
Buy Direct Nitrokey
CISO.POKER Final Table Sponsor & 3rd Place Prize
Security Gadgets - Nitrokey

In a controversial July 2026 vote, the European Union relied on a procedural loophole to extend the "Chat Control 1.0" voluntary mass-scanning regime until 2028, despite a majority of voting lawmakers actually opposing the measure. As lawmakers prepare for the critical September trilogues over the permanent "Chat Control 2.0" regulation, intense debates continue over mandatory age verification, client-side scanning, and the survival of end-to-end encryption. This episode breaks down these complex legislative maneuvers, the pivotal "linchpin" role of Germany in the negotiations, and the emerging "Third Way" proposals designed to protect children on their devices without sacrificing digital privacy.
 
Sponsors:
www.myprivacy.blog
www.compliancehub.wiki
 
Swag: Securitybydesign.shop
Gadgets: Securitygadgets.shop

As modern enterprises adopt autonomous AI and face stricter global privacy regulations, the traditional boundaries between security, privacy, and data leadership are colliding. This podcast explores the critical intersections, strategic partnerships, and inherent conflicts between executive roles like the CISO, DPO, CPO, and the emerging Chief AI Officer. We discuss how these leaders can break down operational silos to form a unified governance matrix that protects sensitive data, enforces real-time security controls, and drives compliant business innovation.
 
Sponsors:
August 5th - The Wynn - Las Vegas - RSVP for Seat
https://cisomarketplace.com
https://compliancehub.wiki
 
Swag: securitybydesign.shop
Gadgets: securitygadgets.shop