How CISOs Stay Current When They're Ignoring Vendor Pitches

<p>We promise to keep your identity private while we discuss the troubles of two-factor authentication.</p> <p>On this episode of the CISO/Security Vendor Relationship Podcast we discuss:</p> <ul> <li>Why don't more people use two-factor authentication? Does the UX still suck? Why can't we agree on a common model for how to authenticate? Will <a href= "https://en.wikipedia.org/wiki/Universal_2nd_Factor">U2F</a> be the saving grace for <a href= "https://en.wikipedia.org/wiki/Multi-factor_authentication">2FA</a>? <a href= "https://www.cnet.com/news/why-more-people-dont-use-simple-two-factor-authentication/"> Story on the debate</a>.</li> <li>What are the signs your employees are going rogue? We debate the need to monitor employees this way. Are internal intrusions the same as external? Is monitoring the monitoring devices enough? What are the signs? <a href= "https://www.linkedin.com/feed/update/urn:li:activity:6432973163579211776"> Discussion on LinkedIn</a> and a recommended book: <a href= "https://www.amazon.com/Nothing-Hide-Tradeoff-between-Security/dp/0300172338"> "Nothing to Hide: The False Tradeoff between Privacy and Security."</a></li> <li>We play a round of "What's Worse?!" It's the game where we determine which is the worst of two really bad practices. In this case, the CISOs have to choose between two unpleasant marketing practices.</li> <li>How do CISOs balance compliance and security: The two aren't equal, but compliance is a means to prove that you're doing security right. Our guest hits it out of the park with a very clear explanation and also how to use compliance to better market your company.</li> <li>How do CISOs discover new solutions: This might as well be the title of this podcast, but we delve into some unique angles that CISOs are taking as they're avoiding traditional pitches from security vendors. <a href= "https://www.linkedin.com/feed/update/urn:li:activity:6387800552838873088/"> Discussion on LinkedIn</a>.</li> <li>Ten-second security tip touting the value of passphrases: See <a href="