I'll Show You My Risk Profile If You Show Me Yours

<p>All links and images for this episode can be found on <a href= "https://cisoseries.com/ill-show-you-my-risk-profile-if-you-show-me-yours/"> CISO Series</a></p> <p>Managing my own risk is tough enough, but now I have to worry about my partners' risk and their partners' risk? I don't even know what's easier to manage: the risk profile of all my third parties or all the exclusions I've got to open up to let third parties into my system.</p> <p>This week’s episode is hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href="http://twitter.com/dspark">@dspark</a>), producer of CISO Series and <a href= "https://www.linkedin.com/in/mikevj/">Mike Johnson</a>. Our sponsored guest is <a href= "https://www.linkedin.com/in/bruce-potter-b84907/">Bruce Potter</a> (<a href="http://twitter.com/gdead">@gdead</a>), CISO, <a href="http://expel.io/">Expel</a>.</p> <p><strong>Thanks to our podcast sponsor, Expel</strong></p> <p><a title="Expel" href="http://expel.io"><img src= "https://assets.libsyn.com/secure/show/24425/Expel_BannerAd_07-2021.png" alt="Expel" width="600" height="100" /></a></p> <p><em><a href="http://expel.io/">Expel</a> offers companies of all shapes and sizes the capabilities of a modern Security Operations Center without the cost and headache of managing one.</em></p> <p>In this episode:</p> <ul> <li>What's easier to manage, 3rd party risk profiles or exclusions?</li> <li>Do you need a Git repository to apply for a job? What else?</li> <li>What's in your happy-grab-bag for hybrid work environments?</li> <li>Is there anything new to say about ransomware strategy?  </li> </ul>