Trust vs.

In this episode of Trust vs., cybersecurity law expert Cristin Flynn Goodwin joins the show to break down some of the most nuanced (and misunderstood) topics in cyber: active defense, regulation, and the legal implications of emerging tech like agentic AI. With over 17 years at Microsoft leading incident response and threat intel, Cristin shares what it really takes to disrupt nation-sta...

Autonomous AI agents are no longer science fiction, they’re already reshaping how we work, build, and protect digital systems. In this episode, Jeremy Huval and Ryan Patrick are joined again by Richard Diver, Security and Identity Strategist at Microsoft, to break down what "agentic AI" really means and why it matters now. Richard unpacks the core building blocks of agent behavior (like ...

Compliance shouldn’t come at the cost of security. In this episode, Leah McGrath (Executive Director, GovRAMP) and Brian Conrad (Director of Global Strategic Compliance Initiatives at Zscaler, formerly of FedRAMP) join the Trust vs. team to talk about multi-framework fatigue, the future of recognition and reciprocity, and why real cybersecurity progress depends on collaboration—not just ...

SOC 2 might be everywhere, but is it actually working?

In this episode, the Trust vs. team welcomes cybersecurity leader, author, and GRC engineer AJ Yawn to break down the state of SOC 2 today and why its greatest strength may also be its biggest weakness. AJ brings years of hands-on experience in auditing, engineering, and startup ...

You can’t plan for everything, but you can build for resilience. In this episode, the Trust vs. team sits down with cybersecurity leader Wendy Nather to explore the human side of resilience. From real-world chaos and crisis response to succession planning, decision authority, and chaos engineering, Wendy shares hard-earned wisdom on what it takes to build organizations that can bend but ...

If AI is already in your cybersecurity stack, are you managing the risk?

In this episode, the Trust vs. team sits down with Donnie Wendt, a Cybersecurity Researcher, and author of The Cybersecurity Trinity to talk about the growing risk surface AI creates. From data poisoning and third-party ML vulnerabilities to the real-world limit...

What if the way we’ve been measuring cybersecurity risk is fundamentally flawed? Too often, organizations rely on color-coded charts and gut instinct to make critical risk decisions leading to a false sense of confidence and missed opportunities for real insight.

In this episode, we’re joined by Douglas Hubbard, creator of the Applie...

Is your third-party risk management process ready for the age of AI? In this episode of Trust vs., Jeremy, Robert, and Ryan sit down with industry leader Laz to unravel the complex (and often chaotic) intersection of artificial intelligence and third-party risk. They explore how AI is amplifying both risk and opportunity in vendor governance, what organizations get wrong about ownership ...

Kicking off Season 3 of Trust vs. with a bang, the team dives straight into one of the most pressing changes on the horizon for healthcare cybersecurity: the proposed updates to HIPAA. Hosts Jeremy Huval, Robert Booker, and new regular voice Ryan Patrick explore what the Notice of Proposed Rulemaking (NPRM) really means for covered entities and business associates. Is this HIPAA 2.0, or ...

In today’s world, the demand for skilled cybersecurity professionals has never been greater, yet the gap between that demand and the available talent continues to grow. In this episode, we sit down with M.K. Palmore, an advisor, cybersecurity leader, and host of The Leadership Student podcast, to explore innovative ways to close this gap. M.K. shares insights on attracting new talent to ...

If we want to excel in working with our boards, communication is key, and no one understands this better than Mike Connly. As the former CTO at United Health Group and an experienced board member himself, Mike is sharing his top strategies for setting clear goals, reviewing progress, and ensuring accountability in the boardroom. He highlights the importance of grasping vulnerabilities, m...

In the rapidly evolving world of artificial intelligence, grasping the layers of responsibility is essential for effectively implementing these technologies. 

In this episode, Richard Diver, a Solutions Architecture specialist for cloud security, author of Guardians of AI, and Senior Manager of Story Design at Microsoft, delves ...

In this episode, we sit down with FC Freaky Clown, an ethical hacker and author of How to Rob Banks, to explore the evolving role of AI in cybersecurity. FC, known for his unique blend of physical and digital hacking skills, discusses how AI is transforming social engineering tactics and its impact on both attackers and defenders. He shares insights from his experience at Defcon and Blac...

How can we balance innovation and regulation in the world of AI? In this episode, Rob van der Veer, an expert in AI, security, and privacy, takes us through his journey from AI startups in the 90s to leading security at the Software Improvement Group. He delves into the rapid evolution of AI, particularly with transformer models, and discusses the dual nature of AI’s potential and risks....

In this episode, Jason Clark, Chief Strategy Officer at Cyera shares insights on the evolving challenges of cybersecurity for organizations of all sizes. He breaks down the essentials of building a strong security strategy, emphasizing the importance of truly understanding your data and aligning cybersecurity efforts with your business goals. Whether you're a startup or an established co...

Jeremy and Robert sit down with Ransomware Sommelier Allan Liska to unravel the complex world of Ransomware, the criminals that engage in this activity, and the growing risk of new forms of extortion. Allan, with over 20 years in the field, delves into the mindset of ransomware actors, crucial monitoring strategies, and the battle taking place on the cyber frontier. He reveals why paying...

In a world full of digital threats, even the best cybersecurity can’t eliminate residual risk. That's where cyber insurance steps in. But securing it is no easy task, even for the most prepared organizations.

In this episode, we are joined by Josh Ladeau, CEO of Trium Cyber and Sidney Prasse and Michael Giuliano from McGill and Partn...

We’re kicking off season 2 with a familiar face: Omar Khawaja is back to discuss how generative AI technology is impacting business governance and security leadership. Like other technologies, AI poses significant risk management challenges, but how can we better understand these systems to protect against them? Omar joins Robert and Jeremy to highlight the difference between understandi...