The Security Strategist

50 episodes listed below

Listen to the show on

PRESS PLAY

Find your next episode

All episodes

In their own words

With cyber attacks more common than ever before and each attack becoming increasingly sophisticated, security teams need to be one step ahead of cybercrime at all times. “The Security Strategist” podcast delves into the depths of the cybercriminal underworld, revealing practical strategies to keep you one step ahead. We dissect the latest trends and threats in cybersecurity, providing insights and expect-backed solutions to protect your organisation effectively.Tune into this cybersecurity podcast as we dissect major threats, explore emerging trends, and share proven prevention strategies to fortify your defences.

Why you'd press play

A 4,000-page security plan meets the laptop that slept through patch night; you know the headache.

Press play if you want

  • to hear why FedRAMP paperwork became costly before you decide what modernization should fix
  • a concrete example of letting a contractor use Salesforce without showing them a credit card number
Read the full recommendation in PlayNext →

Talks about

Best episodes of The Security Strategist

Short reviews from the PlayNext desk, based on the episodes we processed.

FedRAMP 20x: The Future of Compliance, Trends, and Best PracticesApr 16, 2026

A grounded review of how FedRAMP 20X could move federal cloud compliance toward practical value and away from paperwork.

FedRAMP 20X comes through as a serious attempt to modernize federal cloud security compliance, especially a process presented here as slow, expensive, and heavy on documentation.

Why Patch Management Remains the Most Annoying Problem in IT SecurityApr 10, 2026

Offline laptops and crowded network segments make patching feel less routine and more operationally fragile.

Patch management comes through as an old problem that keeps finding new ways to matter. Richard Steenan of IT Harvest frames the conversation with Mike Walters of ActionOne around the practical messiness of vulnerability management: devices are offline, laptops are in motion,…

The Growing Challenge of Protecting Sensitive Enterprise Data Across Browsers, SaaS and AI ToolsApr 9, 2026

A practical look at hiding sensitive fields while access expands across SaaS and AI.

Enterprise data protection gets messier when everyday work runs through browsers, SaaS applications, and AI tools. This episode of The Security Strategist lands on a useful, specific angle: controls have to stay close to sensitive information at the presentation layer.

Beyond the Firewall: Why Executive Risk Is Reshaping Cyber StrategyApr 7, 2026

Executive security starts where the work laptop stops, with personal devices and the home network in view.

Executive risk comes through as a perimeter problem that now reaches well beyond the office. Richard Steenan opens with Dr. Chris Pearson on what it takes to shrink an executive's attack surface, using a $40 million cryptocurrency loss at a decentralized finance company as the…

Podcasts like The Security Strategist

  • Security Now (Audio)TWiT

    Security news worked through one mechanism at a time.

  • Malicious LifeMalicious Life

    Hacks, trials and frauds, told as cybersecurity history.

  • Click Here

    Technology's mechanisms, power's consequences.

  • Hacking HumansN2K Networks

    Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.

  • The Privacy AdvisorJedidiah Bracy, IAPP Editorial Director

    Privacy law meets the systems it governs.

  • The CyberWireAlan Geason

    Cybersecurity headlines, technical detail and the decisions behind defense.

Episodes

  1. 1

    FedRAMP 20x: The Future of Compliance, Trends, and Best Practices

    Hidden gem

    Richard Seaman of IT Harvest interviews Paramify founder and CEO Kenny Scott about FedRAMP 20x, a shift away from 2,000-plus-page SSPs and toward continuous evidence.

    Apr 16, 2026·31m·2 clips
  2. 2

    Why Patch Management Remains the Most Annoying Problem in IT Security

    Hidden gem

    Richard Steenan, Chief Research Analyst at IT Harvest, interviews Mike Walters, President and Co-Founder of ActionOne, after ActionOne receives the Cyber 150 Award for the second consecutive year.

    Apr 10, 2026·23m·1 clip
  3. 3

    The Growing Challenge of Protecting Sensitive Enterprise Data Across Browsers, SaaS and AI Tools

    Hidden gem

    The Security Strategist episode with Chris Steffen and Michael Leland focuses on how enterprises harden browser access to sensitive data while adopting AI tools.

    Apr 9, 2026·24m·1 clip
  4. 4

    Why Patch Management Remains the Most Annoying Problem in IT Security

    Apr 9, 2026·23m
  5. 5

    Beyond the Firewall: Why Executive Risk Is Reshaping Cyber Strategy

    Hidden gem

    On The Security Strategist Podcast, Richard Steenan asks Dr.

    Apr 7, 2026·22m·1 clip
  6. 6

    Speed vs. Privacy: Navigating Digital Threats in Modern Counter Terrorism

    This episode explores the growing role of digital evidence in counterterrorism investigations, featuring an interview with a former law enforcement officer now leading a digital forensics company.

    Apr 1, 2026·23m·1 clip
  7. 7

    Democratising Cybercrime: How AI is Changing Enterprise Security

    Mar 31, 2026·22m
  8. 8

    Cyber Resilience in Microsoft 365: What Security Leaders Must Know

    Mar 30, 2026·30m
  9. 9

    Why Do Most Cyber Breaches Stem from System Failures, Not Human Error?

    Mar 24, 2026·20m
  10. 10

    Are Security Teams Wasting Resources on 99% of Vulnerabilities That Don’t Matter?

    Mar 20, 2026·18m
  11. 11

    Are You Testing Cyber Recovery or Just Hoping Your Backups Work

    Mar 16, 2026·28m
  12. 12

    Unmasking the Invisible Threat: Defend Your APIs Before Attackers Do

    Mar 11, 2026·13m
  13. 13

    The Human Factor in Cybersecurity: Behavioural Interventions That Work

    Feb 24, 2026·27m
  14. 14

    Lessons from Offensive Security: How Organisations Can Improve Cyber Resilience

    Feb 24, 2026·27m
  15. 15

    How CISOs Can Reduce Enterprise Data Risk Without Slowing the Business

    Host Jonathan Kerr interviews Eero Zemir about enterprise data security challenges and proactive risk reduction strategies.

    Feb 24, 2026·28m
  16. 16

    From Passwords to Ransomware: What 597 Real-World Breaches Tell CISOs in 2026

    Feb 24, 2026·21m
  17. 17

    Are CISOs Blind to the Biggest Cloud Attack Surface?

    Feb 24, 2026·32m
  18. 18

    Is AI Quietly Breaking Email Security? Are False Positives Now the Real Breach?

    Feb 23, 2026·20m
  19. 19

    Securing AI-Driven Development in Modern Enterprises

    Feb 23, 2026·25m
  20. 20

    How Can Enterprises Secure AI When Data Moves Faster Than Humans Can Track?

    Feb 16, 2026·17m
  21. 21

    How Do Attackers Exploit Executives’ Personal Lives to Breach Companies?

    Feb 5, 2026·18m
  22. 22

    Why Are AI Agents Forcing CISOs to Rethink Identity Security Architecture?

    Feb 4, 2026·14m
  23. 23

    From Data to Insight: How Enterprises Are Making IoT Secure and Actionable

    Jan 30, 2026·27m
  24. 24

    Human-Led, AI-Driven: The Next Chapter of Security Operations

    Jan 29, 2026·15m
  25. 25

    Why Are Vulnerability Backlogs Still Growing Despite Better Detection?

    Jan 28, 2026·25m
  26. 26

    What Happens to API Security When AI Agents Go Autonomous?

    Jan 16, 2026·15m
  27. 27

    Why AI Agents Demand a New Approach to Identity Security

    Dec 23, 2025·13m
  28. 28

    Is Your Holiday Traffic Human—or AI-Driven and Under Attack?

    Dec 23, 2025·24m
  29. 29

    From IoT to AIoT: Operational and Security Challenges for Modern Enterprises

    Dec 22, 2025·27m
  30. 30

    Overcoming Regulatory, Infrastructure, and Operational Challenges When Scaling Tech Globally

    Dec 19, 2025·25m
  31. 31

    What If We Could Fix Vulnerabilities Faster Than We Find Them?

    Dec 15, 2025·21m
  32. 32

    How Can MSPs Move From Defense to Full Cyber Resilience?

    Dec 15, 2025·30m
  33. 33

    Can Identity Security Close the AI Governance Gap?

    Dec 10, 2025·21m
  34. 34

    EDR, XDR, or MDR - What’s the Real Difference and Why Does It Matter?

    Dec 8, 2025·30m
  35. 35

    Securing Assets in a Complex IT Landscape: Deterministic Automation in ITAM

    Nov 25, 2025·22m
  36. 36

    How Can Businesses Address Guardrails for Autonomous AI Agents with Permissions?

    This episode discusses the need for new authorization standards for AI agents to ensure they respect human or machine intent, building on previous conversations about CIAM and identity management.

    Nov 19, 2025·25m
  37. 37

    Is Current DLP Failing Data Security in the Age of Generative AI?

    Nov 18, 2025·20m
  38. 38

    The Zero Trust Conundrum: How Intelligent Friction Boosts Business Velocity

    Nov 10, 2025·20m
  39. 39

    Universal Privileged Access Authorization: Securing Humans, Machines, and Agentic AI

    Nov 7, 2025·24m
  40. 40

    How Can MSPs Stay Competitive with Managed Detection and Response (MDR)?

    Host Richard Steenman interviews Stephanie Hammond and Jim Wagner from Enable about how managed service providers can handle cybersecurity threats, address the talent crisis, and protect their profit.

    Nov 6, 2025·28m
  41. 41

    Are Your Keys Safe? Why HSMs Are Now Essential for Cloud, Quantum, and AI Security

    Oct 29, 2025·19m
  42. 42

    Is Your CIAM Ready for Web-Scale and Agentic AI? Why Legacy Identity Can't Secure Agentic AI

    Oct 15, 2025·22m
  43. 43

    AI-Powered Scam Factories: The Industrialisation of Fake Shops & Online Fraud

    Oct 14, 2025·25m
  44. 44

    Fast, Safe, and Automated: Bridging DevOps and SecOps in the Age of Engineering Excellence

    Oct 1, 2025·27m
  45. 45

    Why Are 94% of CISOs Worried About AI, and Is Zero Trust the Only Answer?

    Oct 1, 2025·16m
  46. 46

    What Does the Rise of Agentic AI Mean for Traditional Security Models?

    Sep 30, 2025·22m
  47. 47

    Container Security Uncovered: Lessons from NIST SP 800-190

    This episode explores container security and the NIST Application Container Security Guide with expert guests.

    Sep 25, 2025·23m
  48. 48

    AI and the New Age of Cyber Threats

    Sep 23, 2025·16m
  49. 49

    How to Build a Secure Development Workflow in an Era of AI?

    Sep 19, 2025·15m
  50. 50

    How Do You Stop an Encrypted DDoS Attack? How to Overcome HTTPS Challenges

    Sep 10, 2025·18m