
Rationalizing Your Cybersecurity Budget | Security Control Degradation - EP 70
11/08/23 • 28 min
Explore the fast-paced realm of cybersecurity with this Reimagining Cyber episode featuring insights from Tim Rohrbaugh, former global CISO of JetBlue. The conversation delves into the challenges of security control degradation and the risks associated with rapid changes. Rohrbaugh emphasizes the importance of strategic planning over relying on hope, stating, "Hope is not a strategy." The discussion also ventures into the delicate balance of cybersecurity budgets, where overspending can inadvertently support criminal activities.
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]
As featured on Million Podcasts' Best 100 Cybersecurity Podcast and Best 70
Chief Information Security Officer CISO Podcasts rankings.
Explore the fast-paced realm of cybersecurity with this Reimagining Cyber episode featuring insights from Tim Rohrbaugh, former global CISO of JetBlue. The conversation delves into the challenges of security control degradation and the risks associated with rapid changes. Rohrbaugh emphasizes the importance of strategic planning over relying on hope, stating, "Hope is not a strategy." The discussion also ventures into the delicate balance of cybersecurity budgets, where overspending can inadvertently support criminal activities.
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]
As featured on Million Podcasts' Best 100 Cybersecurity Podcast and Best 70
Chief Information Security Officer CISO Podcasts rankings.
Previous Episode

SEC Cyber Rules Just Got Real - Ep 69
Dive into the latest episode of "Reimagining Cyber" with Stan Wisseman and Rob Aragao as they discuss the imminent implementation of SEC cyber rules in December. Join the conversation as they revisit the key aspects, including the four-day disclosure period for cyber incidents deemed material, the evolving role of cybersecurity experts on boards, and insights from the Clorox cyberattack—a potential test case for the SEC cyber ruling.
Explore the financial implications and operational impacts of cyber incidents, with a focus on companies like Clorox, MGM, and Caesars, who have already navigated the disclosure process. Gain valuable perspectives on the potential reach of SEC regulations beyond public companies and the significance of the "How Material Is That Hack" website, which provides estimates of financial losses based on cybersecurity incidents.
Join Stan and Rob as they unravel the complexities of the SEC cyber rules and share their insights on the shifting cybersecurity landscape. Tune in for a comprehensive discussion on the latest developments and considerations for businesses in this evolving regulatory environment.
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]
As featured on Million Podcasts' Best 100 Cybersecurity Podcast and Best 70
Chief Information Security Officer CISO Podcasts rankings.
Next Episode

Former TikTok CISO Shares 2024 Cyber Budget Priorities (where does AI fit?) - Ep 71
Former TikTok CISO Roland Clouthier emphasizes the imperative role of AI in staying competitive in the evolving business landscape:
"If my business is going to compete and succeed, and everyone else is using AI to reduce their OpEx and drive new technology to make us better than the next guy, I better be doing it too."
In this enlightening podcast episode, Clouthier explores crucial aspects of cybersecurity budgets in 2024, including cloud security, data protection, and personnel considerations. Uncover valuable insights as he shares his 'five key takeaways' for effective cyber budgets, stressing the significance of data protection: "A third of our job is going to be around how we protect data. You'll be able to engage and deliver things like AI if you can control your data."
Gain strategic guidance on addressing the evolving skills landscape with Clouthier's advice:
"Just look at your people. These are all new skills. These are all new areas. Make sure you're making the appropriate adjustments to your job families. You're migrating their skills through training, and then you're looking where you're getting your people from in the future."
Stay ahead in cybersecurity by delving into this insightful discussion on the latest industry trends.
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]
As featured on Million Podcasts' Best 100 Cybersecurity Podcast and Best 70
Chief Information Security Officer CISO Podcasts rankings.
Reimagining Cyber - real world perspectives on cybersecurity - Rationalizing Your Cybersecurity Budget | Security Control Degradation - EP 70
Transcript
[00:00:00] Stan Wisseman: Welcome to Reimagining Cyber. This is Stan. I'm also here with Rob. And before we get into speaking to our, our great guest today, Rob, I, I, you know, we had that episode last week on the SEC cyber rule going into effect in December, right? And we saw some action, didn't we, from the SEC this week.
[00:00:19] Rob Aragao: Yeah, this past week we did basically right on the heels of us releasing that episode.
[00:00:23] The
If you like this episode you’ll love
Episode Comments
Generate a badge
Get a badge for your website that links back to this episode
<a href="https://goodpods.com/podcasts/reimagining-cyber-real-world-perspectives-on-cybersecurity-221738/rationalizing-your-cybersecurity-budget-security-control-degradation-e-36353518"> <img src="https://storage.googleapis.com/goodpods-images-bucket/badges/generic-badge-1.svg" alt="listen to rationalizing your cybersecurity budget | security control degradation - ep 70 on goodpods" style="width: 225px" /> </a>
Copy