Shows
The Paramify PodcastSOC 2, FedRAMP 20x, and the Future of Audits with Dixon WrightKenny and Mike sit down with Dixon Wright, Head of Delivery at Eden Data, for a grounded and insightful conversation on security, compliance, and building smarter systems.
They cover:
- Dixon’s journey from college football to leading security at Eden Data
- What it takes to actually deliver cybersecurity — not just sell it
- Why Eden Data joined the FedRAMP 20x pilot
- How compliance is evolving across commercial and federal sectors
- Why trust, transparency, and execution matter more than buzzwords
It’s one of...
2025-12-1657 minThe Paramify PodcastSOC 2, FedRAMP 20x, and the Future of Audits with Dixon WrightKenny and Mike sit down with Dixon Wright, Head of Delivery at Eden Data, for a grounded and insightful conversation on security, compliance, and building smarter systems.
They cover:
- Dixon’s journey from college football to leading security at Eden Data
- What it takes to actually deliver cybersecurity — not just sell it
- Why Eden Data joined the FedRAMP 20x pilot
- How compliance is evolving across commercial and federal sectors
- Why trust, transparency, and execution matter more than buzzwords
It’s one of...
2025-12-1657 minThe Paramify PodcastThe Future of GRC with Jack Rumsey"The AI age we're in is going to force startups to compete in the higher upper echelon of risk assurance."
Jack Rumsey Head of GRC at Swimlane explains why startups will no longer have the luxury of maturing later and how the AI era is pushing even early-stage teams into enterprise-grade security.
This episode covers why assurance needs to evolve, how 20X can level the playing field, why automation is changing everything about how companies prove trust, and Jack's brief era as "the richest fifth-year college student of all time."
Key Takeaways:
• Au...
2025-12-0852 minThe Paramify PodcastThe Future of GRC with Jack Rumsey"The AI age we're in is going to force startups to compete in the higher upper echelon of risk assurance."
Jack Rumsey Head of GRC at Swimlane explains why startups will no longer have the luxury of maturing later and how the AI era is pushing even early-stage teams into enterprise-grade security.
This episode covers why assurance needs to evolve, how 20X can level the playing field, why automation is changing everything about how companies prove trust, and Jack's brief era as "the richest fifth-year college student of all time."
Key Takeaways:
• Au...
2025-12-0852 minThe Paramify PodcastThe Giant Washing Machine of Open Source: Container Security with George ManuelianSecurity isn’t sexy. It’s laundry. You know you need to do it, but you’d rather have a tool do it for you.
Kenny Scott and Mike Schreiner from Paramify sit down with George Manuelian from RapidFort to talk about freeing the captives — the engineers buried in spreadsheets, patch tickets, and compliance chaos.
They cover:
Why security always seems at odds with progress
How automation can fix what boredom created
The giant washing machine for open source
Starting cle...
2025-10-2751 minThe Paramify PodcastThe Giant Washing Machine of Open Source: Container Security with George ManuelianSecurity isn’t sexy. It’s laundry. You know you need to do it, but you’d rather have a tool do it for you.
Kenny Scott and Mike Schreiner from Paramify sit down with George Manuelian from RapidFort to talk about freeing the captives — the engineers buried in spreadsheets, patch tickets, and compliance chaos.
They cover:
Why security always seems at odds with progress
How automation can fix what boredom created
The giant washing machine for open source
Starting cle...
2025-10-2751 minThe Paramify PodcastThe End of FedRAMP as We Know It? Mike Craig on 20x, DoD, and What’s NextFedRAMP as we know it is changing. In this episode, Mike and Kenny sit down with Mike “Waffle” Craig, founder and CEO of Vanaheim Security and longtime cloud and cybersecurity leader, to unpack what FedRAMP 20x means for agencies and vendors across FedCiv and DoD. We get into compliance philosophy, how to define your boundary the right way, why sponsorship strategies matter, and where scalability will make or break 20x.
Mike Craig shares hard-won lessons from incident response, multi-cloud ATOs, and advising startups so they don’t burn six or seven figures chasing the wrong path.
What...
2025-09-2256 minThe Paramify PodcastThe End of FedRAMP as We Know It? Mike Craig on 20x, DoD, and What’s NextFedRAMP as we know it is changing. In this episode, Mike and Kenny sit down with Mike “Waffle” Craig, founder and CEO of Vanaheim Security and longtime cloud and cybersecurity leader, to unpack what FedRAMP 20x means for agencies and vendors across FedCiv and DoD. We get into compliance philosophy, how to define your boundary the right way, why sponsorship strategies matter, and where scalability will make or break 20x.
Mike Craig shares hard-won lessons from incident response, multi-cloud ATOs, and advising startups so they don’t burn six or seven figures chasing the wrong path.
What...
2025-09-2256 minThe Paramify Podcast#45 - The Evolution of FedRAMP and FedRAMP 20x with Jason Oksenhendler“Once you’re in Hotel FedRAMP, you can’t leave.”
Jason Oksenhendler, Cybersecurity Director of FedRAMP®/GovRAMP at Baker Tilly x Moss Adams, sits down with Kenny and Isaac to talk about FedRAMP’s past, how 20x is shaping the future, and why nobody ever really checks out of Hotel FedRAMP.
👉 Key Takeaways:
• FedRAMP 20x was a “hand grenade” for everyone’s roadmap, and it’s already transforming compliance speed and evidence collection.
• Risk-first programs survive change — smart architecture and design decisions matter more than chasing checklists.
• Flexibility vs. rigor — 20X offers new freedom, b...
2025-08-251h 02The Paramify Podcast#45 - The Evolution of FedRAMP and FedRAMP 20x with Jason Oksenhendler“Once you’re in Hotel FedRAMP, you can’t leave.”
Jason Oksenhendler, Cybersecurity Director of FedRAMP®/GovRAMP at Baker Tilly x Moss Adams, sits down with Kenny and Isaac to talk about FedRAMP’s past, how 20x is shaping the future, and why nobody ever really checks out of Hotel FedRAMP.
👉 Key Takeaways:
• FedRAMP 20x was a “hand grenade” for everyone’s roadmap, and it’s already transforming compliance speed and evidence collection.
• Risk-first programs survive change — smart architecture and design decisions matter more than chasing checklists.
• Flexibility vs. rigor — 20X offers new freedom, b...
2025-08-251h 02The Paramify Podcast#44 - Karen Laughton on FedRAMP 20X, AI, and the Future of ComplianceIn this episode of the Paramify Podcast, Karen Laughton, EVP of Advisory at Coalfire, joins Kenny Scott (CEO of Paramify) and Mike Schreiner to unpack the future of government cybersecurity and compliance modernization. From the hard realities of FedRAMP 20X to lessons learned from the early days of FSMA and CMMC confusion, this conversation pulls no punches.
Karen shares how she broke into cybersecurity via HR (and a saltine-fueled CISSP exam), why automation without strategy won’t scale, and what it's going to take to make 20X work at moderate and high baselines. If you're curious where co...
2025-08-1251 minThe Paramify Podcast#44 - Karen Laughton on FedRAMP 20X, AI, and the Future of ComplianceIn this episode of the Paramify Podcast, Karen Laughton, EVP of Advisory at Coalfire, joins Kenny Scott (CEO of Paramify) and Mike Schreiner to unpack the future of government cybersecurity and compliance modernization. From the hard realities of FedRAMP 20X to lessons learned from the early days of FSMA and CMMC confusion, this conversation pulls no punches.
Karen shares how she broke into cybersecurity via HR (and a saltine-fueled CISSP exam), why automation without strategy won’t scale, and what it's going to take to make 20X work at moderate and high baselines. If you're curious where co...
2025-08-1251 minThe Paramify PodcastFedRAMP 20X Roundtable with FedRAMP Director Pete WatermanIt’s not only about faster authorizations—it’s about unlocking the full potential of modern cloud for government.
FedRAMP 20X is how we get there.
In this exclusive roundtable, Pete Waterman (FedRAMP Director), Karen Laughton (EVP of Advisory, CoalFire), Rob Otten (Sr. Director, Risk & Compliance, Flock Safety), Kenny Scott (Founder & CEO, Paramify), and Mike Schreiner (COO, Paramify) break down:
- The mission, process & real impact of the 20X pilot
- How Key Security Indicators (KSIs) make compliance faster & smarter
- What Continuous ATO looks like in practice
- Wh...
2025-07-171h 12The Paramify PodcastFedRAMP 20X Roundtable with FedRAMP Director Pete WatermanIt’s not only about faster authorizations—it’s about unlocking the full potential of modern cloud for government.
FedRAMP 20X is how we get there.
In this exclusive roundtable, Pete Waterman (FedRAMP Director), Karen Laughton (EVP of Advisory, CoalFire), Rob Otten (Sr. Director, Risk & Compliance, Flock Safety), Kenny Scott (Founder & CEO, Paramify), and Mike Schreiner (COO, Paramify) break down:
- The mission, process & real impact of the 20X pilot
- How Key Security Indicators (KSIs) make compliance faster & smarter
- What Continuous ATO looks like in practice
- Wh...
2025-07-171h 12The Paramify Podcast#43 - Martin Rieger on FedRAMP 20X, The Future of FedRAMP Compliance, Cloud, and SecurityToday, we’re sitting down with StackArmor’s Martin Rieger — a FedRAMP veteran with over 300 engagements under his belt — for an unfiltered deep dive into the origin, evolution, and future of FedRAMP compliance.
We cover everything from the early days of DIACAP and gold images to today’s world of automation, OSCAL, and AI-powered documentation. Martin shares war stories, explains why so many companies fail audits even with AI, and gives his take on where FedRAMP 20x is headed.
Key takeaways
- AI can't replace expertise: Using ChatGPT (or any AI) to generate FedRAMP documentat...
2025-05-121h 05The Paramify Podcast#43 - Martin Rieger on FedRAMP 20X, The Future of FedRAMP Compliance, Cloud, and SecurityToday, we’re sitting down with StackArmor’s Martin Rieger — a FedRAMP veteran with over 300 engagements under his belt — for an unfiltered deep dive into the origin, evolution, and future of FedRAMP compliance.
We cover everything from the early days of DIACAP and gold images to today’s world of automation, OSCAL, and AI-powered documentation. Martin shares war stories, explains why so many companies fail audits even with AI, and gives his take on where FedRAMP 20x is headed.
Key takeaways
- AI can't replace expertise: Using ChatGPT (or any AI) to generate FedRAMP documentat...
2025-05-121h 05The Paramify Podcast#42 - FedRAMP 20x and The Creation of FedRAMP with Dave Fairburn Jr.Today we're sitting down with the Father of FedRAMP himself — Dave Fairburn Jr. — for a raw, detailed, and at times hilarious deep dive into the origin story, evolution, and future of the FedRAMP program. From 16-hour days and bureaucracy battles to 2,500-page documentation drafts reduced by weight tests (yes, really), Dave walks us through how the entire FedRAMP framework was created, challenged, and still, nearly 15 years later, hasn’t been "screwed up" (his words). This episode is packed with insider stories, lessons learned, and real talk about:
Why the original FedRAMP design was JAB-only (no agency ATOs)
How 3PAOs c...
2025-04-151h 04The Paramify Podcast#42 - FedRAMP 20x and The Creation of FedRAMP with Dave Fairburn Jr.Today we're sitting down with the Father of FedRAMP himself — Dave Fairburn Jr. — for a raw, detailed, and at times hilarious deep dive into the origin story, evolution, and future of the FedRAMP program. From 16-hour days and bureaucracy battles to 2,500-page documentation drafts reduced by weight tests (yes, really), Dave walks us through how the entire FedRAMP framework was created, challenged, and still, nearly 15 years later, hasn’t been "screwed up" (his words). This episode is packed with insider stories, lessons learned, and real talk about:
Why the original FedRAMP design was JAB-only (no agency ATOs)
How 3PAOs c...
2025-04-151h 04The Paramify Podcast#41 - Discussing FedRAMP 20xWhat do DC sneakers, HR-approved marriage advice, and compliance robots have in common? They’re all part of this episode as Kenny and Mike dive into the bold future of FedRAMP 20X — and why it’s finally time to fix the pain points for both private companies and government agencies.
Here’s what they cover:
- The (not) shift in risk ownership — why agencies have always owned the risk and the PMO will focus on standards
- The myth of "set-it-and-forget-it" security — and the need for continuous monitoring
- The problem with screens...
2025-03-3131 minThe Paramify Podcast#41 - Discussing FedRAMP 20xWhat do DC sneakers, HR-approved marriage advice, and compliance robots have in common? They’re all part of this episode as Kenny and Mike dive into the bold future of FedRAMP 20X — and why it’s finally time to fix the pain points for both private companies and government agencies.
Here’s what they cover:
- The (not) shift in risk ownership — why agencies have always owned the risk and the PMO will focus on standards
- The myth of "set-it-and-forget-it" security — and the need for continuous monitoring
- The problem with screens...
2025-03-3131 minThe Paramify Podcast#40 - Discussing FedRAMP with Pete WatermanToday, we're pretending it's August 24, 2024, as Kenny and Mike sit down with Pete Waterman to talk about his backstory and what inspired him to apply to become the new FedRAMP Director.
Spoiler alert: we discuss frustration, bureaucracy, and a wild career move. Also these things:
- Pete's Origin Story – Every hero has one.
- Government Tech: Why Is It So Hard? – Bureaucracy, risk, and the myth of FISMA jail.
- The Future of FedRAMP – Can it get faster?
- Motorcycles & Risk Management – How intercontinental motorcycle camping trips bring perspective.
- Compliance Theater...
2025-03-191h 14The Paramify Podcast#40 - Discussing FedRAMP with Pete WatermanToday, we're pretending it's August 24, 2024, as Kenny and Mike sit down with Pete Waterman to talk about his backstory and what inspired him to apply to become the new FedRAMP Director.
Spoiler alert: we discuss frustration, bureaucracy, and a wild career move. Also these things:
- Pete's Origin Story – Every hero has one.
- Government Tech: Why Is It So Hard? – Bureaucracy, risk, and the myth of FISMA jail.
- The Future of FedRAMP – Can it get faster?
- Motorcycles & Risk Management – How intercontinental motorcycle camping trips bring perspective.
- Compliance Theater...
2025-03-191h 14The Paramify Podcast#39 - Discussing FedRAMP with Jason FordToday Kenny and Mike are talking to the one and only Jason Ford, CEO & Founder of Steel Patriot Partners—a true FedRAMP guru who's been securing systems since digital transformation was still a baby. Jason shares his battle-tested strategies for navigating security audits, implementing encryption the right way, and avoiding common pitfalls that can delay your compliance efforts for months.
Here's what we're tackling in this episode:
- "If You Can't Draw It, You Can't Secure It" – Why mapping your architecture is step one in cybersecurity.
- FedRAMP High vs. Moderate – Why ent...
2025-03-031h 04The Paramify Podcast#39 - Discussing FedRAMP with Jason FordToday Kenny and Mike are talking to the one and only Jason Ford, CEO & Founder of Steel Patriot Partners—a true FedRAMP guru who's been securing systems since digital transformation was still a baby. Jason shares his battle-tested strategies for navigating security audits, implementing encryption the right way, and avoiding common pitfalls that can delay your compliance efforts for months.
Here's what we're tackling in this episode:
- "If You Can't Draw It, You Can't Secure It" – Why mapping your architecture is step one in cybersecurity.
- FedRAMP High vs. Moderate – Why ent...
2025-03-031h 04The Paramify Podcast#38 - Building a Great Security Program with Google SheetsGetting started with risk management is easier than you think- and you don’t need fancy tools to do it.
In this episode, Kenny and Mike break down how a simple Google Sheet can be your secret weapon for designing a great security program. Whether you’re navigating FedRAMP, SOC 2, or ISO 27001, the key is just getting started—no expensive software required.
If you're a startup founder, security pro, or just compliance-curious, this episode is packed with easy, actionable steps to help you kick off your compliance journey—without breaking the bank.
...
2025-02-1734 minThe Paramify Podcast#38 - Building a Great Security Program with Google SheetsGetting started with risk management is easier than you think- and you don’t need fancy tools to do it.
In this episode, Kenny and Mike break down how a simple Google Sheet can be your secret weapon for designing a great security program. Whether you’re navigating FedRAMP, SOC 2, or ISO 27001, the key is just getting started—no expensive software required.
If you're a startup founder, security pro, or just compliance-curious, this episode is packed with easy, actionable steps to help you kick off your compliance journey—without breaking the bank.
...
2025-02-1734 minThe Paramify Podcast#37 - A Journey Into FedRAMP with Eric Britton AdamsEric, the CISO at Federal Cyber Defense Solutions and former Chief FedRAMP Strategist at IBM and FedRAMP Leader at HP, shares his journey from growing up on a farm to becoming a CISO and FedRAMP expert. We dive into the challenges of FedRAMP compliance, the evolution of cybersecurity, and how today's security teams can strike the balance between technical expertise and meeting compliance demands.
In this episode, we cover:
- The real struggles of legacy tech and security controls
- How cybersecurity careers have evolved—then vs. now
- The shift toward security by de...
2025-02-031h 00The Paramify Podcast#37 - A Journey Into FedRAMP with Eric Britton AdamsEric, the CISO at Federal Cyber Defense Solutions and former Chief FedRAMP Strategist at IBM and FedRAMP Leader at HP, shares his journey from growing up on a farm to becoming a CISO and FedRAMP expert. We dive into the challenges of FedRAMP compliance, the evolution of cybersecurity, and how today's security teams can strike the balance between technical expertise and meeting compliance demands.
In this episode, we cover:
- The real struggles of legacy tech and security controls
- How cybersecurity careers have evolved—then vs. now
- The shift toward security by de...
2025-02-031h 00The Paramify Podcast#36 - What are the Control Assessment Phases?Whether you’re launching a brand-new security program or fine-tuning your existing one, this episode has everything you need to know.
Kenny and Mike are breaking down the 𝗰𝗼𝗻𝘁𝗿𝗼𝗹 𝗮𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗽𝗵𝗮𝘀𝗲𝘀 – why they matter and how they can transform your security processes.
Here’s what’s on deck in this episode of The Paramify Podcast:
- How to plan your security framework so it’s rock-solid from the start.
- Common pitfalls in frameworks like FedRAMP (and how to avoid them, no trench runs required).
- The importance of boundaries, collaboration, and a digital-first approach.
- Real-world lessons (and Star Wars stories) for simplifying security chall...
2025-01-2122 minThe Paramify Podcast#36 - What are the Control Assessment Phases?Whether you’re launching a brand-new security program or fine-tuning your existing one, this episode has everything you need to know.
Kenny and Mike are breaking down the 𝗰𝗼𝗻𝘁𝗿𝗼𝗹 𝗮𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗽𝗵𝗮𝘀𝗲𝘀 – why they matter and how they can transform your security processes.
Here’s what’s on deck in this episode of The Paramify Podcast:
- How to plan your security framework so it’s rock-solid from the start.
- Common pitfalls in frameworks like FedRAMP (and how to avoid them, no trench runs required).
- The importance of boundaries, collaboration, and a digital-first approach.
- Real-world lessons (and Star Wars stories) for simplifying security chall...
2025-01-2122 minThe Paramify Podcast#34 - Discussing CMMC with Tony Bai from RISCPointToday we’re talking to Tony Bai. He’s got 25 years of experience in cyber defense and operations, Tony Bai serves as the Chief Solutions Officer at RISCPoint. A United States Air Force veteran and lots of leadership experience at leading consulting organizations. Tony specializes in FedRAMP, CMMC and other NIST frameworks and is a leading voice on their latest developments that seem to be pretty intense these days. This is a great episode!
Learn more about Tony Bai:
https://www.linkedin.com/in/williamtbai/
Learn more about RISCPoint:
RISCPoint is an industry-leading management consulting firm, specializing in cybers...
2024-12-0947 minThe Paramify Podcast#34 - Discussing CMMC with Tony Bai from RISCPointToday we’re talking to Tony Bai. He’s got 25 years of experience in cyber defense and operations, Tony Bai serves as the Chief Solutions Officer at RISCPoint. A United States Air Force veteran and lots of leadership experience at leading consulting organizations. Tony specializes in FedRAMP, CMMC and other NIST frameworks and is a leading voice on their latest developments that seem to be pretty intense these days. This is a great episode!
Learn more about Tony Bai:
https://www.linkedin.com/in/williamtbai/
Learn more about RISCPoint:
RISCPoint is an industry-leading management consulting firm, specializing in cybers...
2024-12-0947 minThe Paramify Podcast#33 - Discussing Cybersecurity with Mandy Andress CISO at ElasticWe're talking with Mandy Andress, Chief Information Security Officer (CISO) at Elastic. Mandy is making a huge impact in the security industry as the author of Surviving Security: How to Integrate People, Process, and Technology, a Top 100 CISO (C100) Award recipient, and a LinkedIn Top Voice. Her leadership goes well beyond her role as CISO – she's also a trusted advisor to many organizations, a frequent speaker at global conferences like BlackHat and Networld + Interop, and a driving force behind Elastic's IPO success.
Learn more about Mandy Andress:
Mandy's Linkedin: https://www.linkedin.com/in/mandyandress/
...
2024-11-2541 minThe Paramify Podcast#33 - Discussing Cybersecurity with Mandy Andress CISO at ElasticWe're talking with Mandy Andress, Chief Information Security Officer (CISO) at Elastic. Mandy is making a huge impact in the security industry as the author of Surviving Security: How to Integrate People, Process, and Technology, a Top 100 CISO (C100) Award recipient, and a LinkedIn Top Voice. Her leadership goes well beyond her role as CISO – she's also a trusted advisor to many organizations, a frequent speaker at global conferences like BlackHat and Networld + Interop, and a driving force behind Elastic's IPO success.
Learn more about Mandy Andress:
Mandy's Linkedin: https://www.linkedin.com/in/mandyandress/
...
2024-11-2541 minThe Paramify Podcast#32 - Discussing FedRAMP with Michael CarterToday, we’re honored to have Michael Carter on the show! Michael is the Managing Partner and Co-founder of Fortreum. Michael brings over two decades of expertise in cybersecurity and compliance, specializing in FedRAMP, FISMA, PCI, and more. He has held key leadership roles at Coalfire and Veris Group, shaping compliance strategies for top organizations across both government and commercial sectors. Michael’s deep insights into security and risk management make him a leading voice in the industry.
Learn more about Michael Carter: / carte2ms
Learn more about Fortreum: https://fortreum.com/
Learn more...
2024-09-0654 minThe Paramify Podcast#32 - Discussing FedRAMP with Michael CarterToday, we’re honored to have Michael Carter on the show! Michael is the Managing Partner and Co-founder of Fortreum. Michael brings over two decades of expertise in cybersecurity and compliance, specializing in FedRAMP, FISMA, PCI, and more. He has held key leadership roles at Coalfire and Veris Group, shaping compliance strategies for top organizations across both government and commercial sectors. Michael’s deep insights into security and risk management make him a leading voice in the industry.
Learn more about Michael Carter: / carte2ms
Learn more about Fortreum: https://fortreum.com/
Learn more...
2024-09-0654 minThe Paramify Podcast#31 - Discussing OSCAL and Cybersecurity with Alexander SteinToday, we're honored to have Alexander Stein on the show. Alexander has a host of experience in Cybersecurity. He has worked as an IT Cybersecurity Specialist at the National Institute of Standards and Technology (NIST). With over two years at NIST focusing on Information Technology and Vulnerability Management, Alex has also held key roles at Flexion Inc. as a Security Practice Lead and Application Security Engineer,
and at BAM Technologies Learn more about Alexander Stein here: LinkedIn: / alexanderjstein
GitHub: github.com/aj-stein.
Learn more about NIST: https://www.nist.gov/
Lear...
2024-08-231h 00The Paramify Podcast#31 - Discussing OSCAL and Cybersecurity with Alexander SteinToday, we're honored to have Alexander Stein on the show. Alexander has a host of experience in Cybersecurity. He has worked as an IT Cybersecurity Specialist at the National Institute of Standards and Technology (NIST). With over two years at NIST focusing on Information Technology and Vulnerability Management, Alex has also held key roles at Flexion Inc. as a Security Practice Lead and Application Security Engineer,
and at BAM Technologies Learn more about Alexander Stein here: LinkedIn: / alexanderjstein
GitHub: github.com/aj-stein.
Learn more about NIST: https://www.nist.gov/
Lear...
2024-08-231h 00The Paramify Podcast#30 - Discussing Government Affairs & Compliance with Michael ClauserToday, we're honored to have Michael Clauser, on the show. Mike is the Founder & Managing Director of Ark where he helps tech and defense companies navigate government relations. He is a seasoned professional in government affairs, cybersecurity, and national security. Michael has led pivotal roles at Okta, Access Partnership, Analog Devices, and Fujitsu Limited, and served as a national security aide in the Pentagon. With a decade as an Intelligence Officer in the U.S. Navy, he has also held leadership roles supporting veterans and contributing to public policy.
Learn more about Michael Clauser:
LinkedIn: https://ww...
2024-08-0945 minThe Paramify Podcast#30 - Discussing Government Affairs & Compliance with Michael ClauserToday, we're honored to have Michael Clauser, on the show. Mike is the Founder & Managing Director of Ark where he helps tech and defense companies navigate government relations. He is a seasoned professional in government affairs, cybersecurity, and national security. Michael has led pivotal roles at Okta, Access Partnership, Analog Devices, and Fujitsu Limited, and served as a national security aide in the Pentagon. With a decade as an Intelligence Officer in the U.S. Navy, he has also held leadership roles supporting veterans and contributing to public policy.
Learn more about Michael Clauser:
LinkedIn: https://ww...
2024-08-0945 min
Silicon Slopes | Leaders Interviewing LeadersReal Advice for Serious Entrepreneurs | Kenny Scott, Paramify Founder & CEOParamify founder & CEO, Kenny Scott, joins Clint Betts for this episode of the Silicon Slopes Show. Paramify is a platform that simplifies compliance reporting and documentation processes for cloud service providers. They chat about Kenny's journey as an entrepreneur including how he got involved in cyber security, the ups and downs of looking for business partners, and working with customers to solve complex problems. Having experience bootstrapping, Kenny talks about his methods of raising funds and successfully navigating partnerships with large enterprises by hiring the right talent to cultivate and maintain those relationships. Tune in to hear more advice for...
2024-07-2935 minThe Paramify Podcast#29 - Discussing GRC Automation with Matt HillaryToday we're honored to have Matt Hillary on the podcast. Matt is the Vice President of Security and Chief Information Security Officer at Drata. He is a seasoned cybersecurity leader with 15 years of experience and a passion for enabling innovation.
Learn more about Matt Hillary:
LinkedIn: https://www.linkedin.com/in/matthewhillary/
Matt Hillary's Forbes Article: https://www.forbes.com/sites/forbestechcouncil/2024/06/20/privacy-by-design-and-its-impact-on-security-and-grc/
Learn More about Drata:
Drata's Website: https://drata.com/
Drata's LinkedIn: https://www.linkedin.com/company/drata/posts/?feedView=all
Learn more about Paramify:
Paramify's We...
2024-07-2651 minThe Paramify Podcast#29 - Discussing GRC Automation with Matt HillaryToday we're honored to have Matt Hillary on the podcast. Matt is the Vice President of Security and Chief Information Security Officer at Drata. He is a seasoned cybersecurity leader with 15 years of experience and a passion for enabling innovation.
Learn more about Matt Hillary:
LinkedIn: https://www.linkedin.com/in/matthewhillary/
Matt Hillary's Forbes Article: https://www.forbes.com/sites/forbestechcouncil/2024/06/20/privacy-by-design-and-its-impact-on-security-and-grc/
Learn More about Drata:
Drata's Website: https://drata.com/
Drata's LinkedIn: https://www.linkedin.com/company/drata/posts/?feedView=all
Learn more about Paramify:
Paramify's We...
2024-07-2651 minThe Paramify Podcast#28 - Discussing Cloud Security and GRC with Eric EvansToday we're honored to have Eric Evans on the show! Eric is the Founder and CTO of HanaByte, he is a cloud security and compliance expert. He has led security initiatives for startups to Fortune 10 companies and is a renowned public speaker on cloud security and compliance automation.
Learn more about Hanabyte:
https://www.hanabyte.com/ https://www.linkedin.com/company/hanabyte/posts/?feedView=all
Hanabyte's write-up on the OMB Memo:
https://www.hanabyte.com/a-look-at-the-modernizing-fedramp-memo/
Eric Evans's LinkedIn: https://www.linkedin.com/in/ericgonzalesevans/
Kenny Scott's...
2024-07-121h 02The Paramify Podcast#28 - Discussing Cloud Security and GRC with Eric EvansToday we're honored to have Eric Evans on the show! Eric is the Founder and CTO of HanaByte, he is a cloud security and compliance expert. He has led security initiatives for startups to Fortune 10 companies and is a renowned public speaker on cloud security and compliance automation.
Learn more about Hanabyte:
https://www.hanabyte.com/ https://www.linkedin.com/company/hanabyte/posts/?feedView=all
Hanabyte's write-up on the OMB Memo:
https://www.hanabyte.com/a-look-at-the-modernizing-fedramp-memo/
Eric Evans's LinkedIn: https://www.linkedin.com/in/ericgonzalesevans/
Kenny Scott's...
2024-07-121h 02The Paramify Podcast#27 - Discussing Cybersecurity and Compliance with Den JonesToday, we're honored to be joined by Den Jones, Founder and CEO of 909Cyber and a veteran in cybersecurity. With a robust career that includes roles as Chief Security Officer at SonicWall, CSO at Banyan Security and Senior Director of Enterprise Security at Cisco, Den brings a wealth of experience to the table. He's a Stanford alumnus with a focus on Cyber Security and Executive Strategy, holds a Higher National Certificate in Computing from West Lothian College, and is a certified CISSP. Den also hosts 'Get IT Started. Get IT Done.', a podcast that discusses the cybersecurity industry...
2024-06-2848 minThe Paramify Podcast#27 - Discussing Cybersecurity and Compliance with Den JonesToday, we're honored to be joined by Den Jones, Founder and CEO of 909Cyber and a veteran in cybersecurity. With a robust career that includes roles as Chief Security Officer at SonicWall, CSO at Banyan Security and Senior Director of Enterprise Security at Cisco, Den brings a wealth of experience to the table. He's a Stanford alumnus with a focus on Cyber Security and Executive Strategy, holds a Higher National Certificate in Computing from West Lothian College, and is a certified CISSP. Den also hosts 'Get IT Started. Get IT Done.', a podcast that discusses the cybersecurity industry...
2024-06-2848 minThe Paramify Podcast#26 - Exploring OSCAL and GRC with Rob SherwoodToday, we’re honored to have Rob Sherwood on the podcast. Rob is a seasoned cybersecurity professional with extensive experience in policy management, PKI architecture, and identity management. With over two decades in the field, Rob has left a lasting impact through his dedication to standards development, including his significant contributions to the Open Security Controls Assessment Language (OSCAL). From his role as a Principal Consultant at Credentive Security to his pivotal involvement in projects like the oscal-pki-policy-converter tool, Rob's passion for advancing cybersecurity practices is evident. As an advocate for collaboration and knowledge-sharing, his insights into OSCAL offer in...
2024-06-141h 00The Paramify Podcast#26 - Exploring OSCAL and GRC with Rob SherwoodToday, we’re honored to have Rob Sherwood on the podcast. Rob is a seasoned cybersecurity professional with extensive experience in policy management, PKI architecture, and identity management. With over two decades in the field, Rob has left a lasting impact through his dedication to standards development, including his significant contributions to the Open Security Controls Assessment Language (OSCAL). From his role as a Principal Consultant at Credentive Security to his pivotal involvement in projects like the oscal-pki-policy-converter tool, Rob's passion for advancing cybersecurity practices is evident. As an advocate for collaboration and knowledge-sharing, his insights into OSCAL offer in...
2024-06-141h 00The Paramify Podcast#25 - Exploring GRC & FedRAMP with Matthew GrahamToday we had the honor to talk with Matthew Graham, the Director of US Federal Practice at Prescient Security. Matthew is a seasoned cybersecurity expert whose extensive career has spanned technical and strategic leadership roles. With a rich background that includes high-level certifications such as CISSP, CASP+, and CCNA, Matthew brings a wealth of knowledge on FedRAMP & cybersecurity practices and trends.
In this episode, we talk about everything from FedRAMP Rev 5 to Hurricane Katrina and police interrogations.
Learn more about Matthew Graham: https://www.linkedin.com/in/msgcyberassessments/
Learn more about Prescient Security: p...
2024-05-3146 minThe Paramify Podcast#25 - Exploring GRC & FedRAMP with Matthew GrahamToday we had the honor to talk with Matthew Graham, the Director of US Federal Practice at Prescient Security. Matthew is a seasoned cybersecurity expert whose extensive career has spanned technical and strategic leadership roles. With a rich background that includes high-level certifications such as CISSP, CASP+, and CCNA, Matthew brings a wealth of knowledge on FedRAMP & cybersecurity practices and trends.
In this episode, we talk about everything from FedRAMP Rev 5 to Hurricane Katrina and police interrogations.
Learn more about Matthew Graham: https://www.linkedin.com/in/msgcyberassessments/
Learn more about Prescient Security: p...
2024-05-3146 minThe Paramify Podcast#24 - Discussing GRC & OSCAL with Brandt KellerToday we had honor to talk with Brandt Keller, a distinguished software engineer and open source developer advocate with a comprehensive background that spans significant achievements in both the military and technology sectors. A veteran of the U.S. Marine Corps, Brandt has transitioned his disciplined and strategic approach from the field of communications within the military to the forefront of software engineering and cybersecurity. His recent endeavors have led him to explore the intricacies of Governance, Risk Management, and Compliance (GRC), focusing on the adoption of the Open Security Controls Assessment Language (OSCAL) by NIST to promote data...
2024-05-1747 minThe Paramify Podcast#24 - Discussing GRC & OSCAL with Brandt KellerToday we had honor to talk with Brandt Keller, a distinguished software engineer and open source developer advocate with a comprehensive background that spans significant achievements in both the military and technology sectors. A veteran of the U.S. Marine Corps, Brandt has transitioned his disciplined and strategic approach from the field of communications within the military to the forefront of software engineering and cybersecurity. His recent endeavors have led him to explore the intricacies of Governance, Risk Management, and Compliance (GRC), focusing on the adoption of the Open Security Controls Assessment Language (OSCAL) by NIST to promote data...
2024-05-1747 minThe Paramify Podcast#23 - Discussing Data Privacy with Tommy HoschouerToday we're honored to host Tommy Hoschouer, who currently leads the global public sector efforts at DeleteMe. Tommy's rich history at companies like Sprinklr, Medallia, SAP, and Qualtrics has equipped him with a unique perspective on using technology to enhance public sector operations, leading to significant improvements in revenue and efficiency. Now at DeleteMe, he is dedicated to defending personal and professional information from increasingly sophisticated digital threats, such as identity theft and cyber attacks. His focus on strengthening data privacy and security is crucial in our digital era. We look forward to unpacking his valuable insights on how...
2024-05-0341 minThe Paramify Podcast#23 - Discussing Data Privacy with Tommy HoschouerToday we're honored to host Tommy Hoschouer, who currently leads the global public sector efforts at DeleteMe. Tommy's rich history at companies like Sprinklr, Medallia, SAP, and Qualtrics has equipped him with a unique perspective on using technology to enhance public sector operations, leading to significant improvements in revenue and efficiency. Now at DeleteMe, he is dedicated to defending personal and professional information from increasingly sophisticated digital threats, such as identity theft and cyber attacks. His focus on strengthening data privacy and security is crucial in our digital era. We look forward to unpacking his valuable insights on how...
2024-05-0341 minThe Paramify Podcast#22 - A Journey from Journalism to GRC with Brian MartinezToday, we had the honor to have Brian Martinez, a leading expert in governance, risk, and compliance (GRC) with over two decades of experience at Michigan State University and the broader cybersecurity community. As the Governance, Risk, and Compliance Lead at MSU, Brian has spearheaded critical security projects and compliance frameworks, contributing significantly to the university's research and security posture. Beyond MSU, Brian enriches the cybersecurity field through his roles as Founder and President of BIDE Consulting and Director at #misec, alongside his volunteer work with (ISC)² in developing the CISSP certification exam. In this episode, we'll dive into B...
2024-04-1945 minThe Paramify Podcast#22 - A Journey from Journalism to GRC with Brian MartinezToday, we had the honor to have Brian Martinez, a leading expert in governance, risk, and compliance (GRC) with over two decades of experience at Michigan State University and the broader cybersecurity community. As the Governance, Risk, and Compliance Lead at MSU, Brian has spearheaded critical security projects and compliance frameworks, contributing significantly to the university's research and security posture. Beyond MSU, Brian enriches the cybersecurity field through his roles as Founder and President of BIDE Consulting and Director at #misec, alongside his volunteer work with (ISC)² in developing the CISSP certification exam. In this episode, we'll dive into B...
2024-04-1945 minThe Paramify Podcast#21 - Discussing Cybersecurity & GRC with Troy FineToday we had the honor to speak with Troy Fine, the Senior Advisor at Geels Norton, where he's making significant strides in cybersecurity and compliance. With a rich history in the field, including key positions at Drata and Schneider Downs, Troy's credentials—boasting certifications like ISO 27001:2013 Lead Auditor and CISSP—speak volumes of his expertise. Beyond his professional acumen, Troy captures the cybersecurity community's attention with insightful, humorous memes on LinkedIn, making the dense world of GRC and IT audit accessible and engaging. His memes commonly refer to SOC 2 not being a certification.
In today's episode we talk...
2024-04-0554 minThe Paramify Podcast#21 - Discussing Cybersecurity & GRC with Troy FineToday we had the honor to speak with Troy Fine, the Senior Advisor at Geels Norton, where he's making significant strides in cybersecurity and compliance. With a rich history in the field, including key positions at Drata and Schneider Downs, Troy's credentials—boasting certifications like ISO 27001:2013 Lead Auditor and CISSP—speak volumes of his expertise. Beyond his professional acumen, Troy captures the cybersecurity community's attention with insightful, humorous memes on LinkedIn, making the dense world of GRC and IT audit accessible and engaging. His memes commonly refer to SOC 2 not being a certification.
In today's episode we talk...
2024-04-0554 minThe Paramify Podcast#20 - Discussing GRC and Infosec with Beau ButaudToday we had the honor to talk to Beau Butaud, a visionary in the compliance and cybersecurity field and the co-founder of Render Compliance. With a background that includes leading roles in risk advisory and compliance management at Moss Adams, and significant contributions at BDO USA, LLP, and Peterson Sullivan LLP, Beau brings a wealth of expertise to the forefront of cybersecurity. His credentials, including AWS Security Fundamentals, CISA, and CPA certifications, underscore his deep commitment to the industry. Beau's innovative approach to SOC 2 assessments at Render Compliance is redefining standards, making security compliance both accessible and impactful for...
2024-03-2256 minThe Paramify Podcast#20 - Discussing GRC and Infosec with Beau ButaudToday we had the honor to talk to Beau Butaud, a visionary in the compliance and cybersecurity field and the co-founder of Render Compliance. With a background that includes leading roles in risk advisory and compliance management at Moss Adams, and significant contributions at BDO USA, LLP, and Peterson Sullivan LLP, Beau brings a wealth of expertise to the forefront of cybersecurity. His credentials, including AWS Security Fundamentals, CISA, and CPA certifications, underscore his deep commitment to the industry. Beau's innovative approach to SOC 2 assessments at Render Compliance is redefining standards, making security compliance both accessible and impactful for...
2024-03-2256 minThe Paramify Podcast#19 - Discussing GRC and IT Audit with Jack RumseyToday we had the honor to talk to Jack Rumsey, the Head of GRC at Swimlane. With a rich background in IT security and audit, including roles at DaVita, Schellman, and KPMG, Jack is an expert in compliance standards like SOC II, ISO27001, GDPR, and FedRAMP. Holding a Bachelor's degree in Computer and Information Systems Security from Illinois State University.
In today's episode, we talk about everything from the difficulties of explaining a GRC career to someone outside of GRC, to building GRC tools in OSCAL.
Learn more about Paramify here: https://www.paramify.com...
2024-03-081h 01The Paramify Podcast#19 - Discussing GRC and IT Audit with Jack RumseyToday we had the honor to talk to Jack Rumsey, the Head of GRC at Swimlane. With a rich background in IT security and audit, including roles at DaVita, Schellman, and KPMG, Jack is an expert in compliance standards like SOC II, ISO27001, GDPR, and FedRAMP. Holding a Bachelor's degree in Computer and Information Systems Security from Illinois State University.
In today's episode, we talk about everything from the difficulties of explaining a GRC career to someone outside of GRC, to building GRC tools in OSCAL.
Learn more about Paramify here: https://www.paramify.com...
2024-03-081h 01The Paramify Podcast#18 - Discussing CMMC & Cybersecurity with Fernando MachadoToday, we're excited to welcome a true luminary in the field of cybersecurity, Fernando Machado. Not only is he the Managing Principal and CISO at Cybersec Investments, LLC, but Fernando is also a recognized Certified Third-Party Assessment Organization (C3PAO) leader. His extensive experience spans over two decades with key roles in companies like L3Harris Technologies and Raytheon. Fernando is the author of "CMMC Simplified," a pivotal resource for understanding the complexities of the Cybersecurity Maturity Model Certification.
In today's episode, Fernando tells us about his invaluable insights on cybersecurity's evolving landscape and the nuances of...
2024-02-2329 minThe Paramify Podcast#18 - Discussing CMMC & Cybersecurity with Fernando MachadoToday, we're excited to welcome a true luminary in the field of cybersecurity, Fernando Machado. Not only is he the Managing Principal and CISO at Cybersec Investments, LLC, but Fernando is also a recognized Certified Third-Party Assessment Organization (C3PAO) leader. His extensive experience spans over two decades with key roles in companies like L3Harris Technologies and Raytheon. Fernando is the author of "CMMC Simplified," a pivotal resource for understanding the complexities of the Cybersecurity Maturity Model Certification.
In today's episode, Fernando tells us about his invaluable insights on cybersecurity's evolving landscape and the nuances of...
2024-02-2329 minThe Paramify Podcast#17 - Discussing FedRAMP and The Origin of Paramify with Brad BartholomewToday we had the honor to sit down with Brad Bartholomew, the Director of FedRAMP Compliance at Trellix, and a veteran in the cybersecurity field. With a rich history spanning Adobe to Palo Alto Networks, Brad brings invaluable insights into GRC, cloud security, and the evolving landscape of cybersecurity frameworks.
In this episode, we discuss everything from creating an ATO package in 3.5 hours to the challenges of FedRAMP and the origins of Paramify.
Learn more about Brad Bartholomew: https://www.linkedin.com/in/bradbartholomew7/
Learn more about Paramify: https://ww...
2024-02-0949 minThe Paramify Podcast#17 - Discussing FedRAMP and The Origin of Paramify with Brad BartholomewToday we had the honor to sit down with Brad Bartholomew, the Director of FedRAMP Compliance at Trellix, and a veteran in the cybersecurity field. With a rich history spanning Adobe to Palo Alto Networks, Brad brings invaluable insights into GRC, cloud security, and the evolving landscape of cybersecurity frameworks.
In this episode, we discuss everything from creating an ATO package in 3.5 hours to the challenges of FedRAMP and the origins of Paramify.
Learn more about Brad Bartholomew: https://www.linkedin.com/in/bradbartholomew7/
Learn more about Paramify: https://ww...
2024-02-0949 minThe Paramify Podcast#16 - Exploring The Fatal Funnel of Sales with Reade KingToday we had the honor to sit down with Reade King, a seasoned professional whose dynamic career spans over 15 years, including roles in the Department of Defense, and the Utah Army National Guard, and is now involved in the fast-paced world of SaaS startups. Reade brings a unique blend of strategic relationship-building and resilience honed in high-pressure environments to his current role in Sales Development at Anonyome Labs, Inc.
In our conversation, we talk about everything from the "color of money" to fixing trucks. Perhaps the most interesting concept we discuss is the concept of the "Fatal...
2024-01-2652 minThe Paramify Podcast#16 - Exploring The Fatal Funnel of Sales with Reade KingToday we had the honor to sit down with Reade King, a seasoned professional whose dynamic career spans over 15 years, including roles in the Department of Defense, and the Utah Army National Guard, and is now involved in the fast-paced world of SaaS startups. Reade brings a unique blend of strategic relationship-building and resilience honed in high-pressure environments to his current role in Sales Development at Anonyome Labs, Inc.
In our conversation, we talk about everything from the "color of money" to fixing trucks. Perhaps the most interesting concept we discuss is the concept of the "Fatal...
2024-01-2652 minThe Paramify Podcast#15 - Discussing Cybersecurity with Frank KyazzeFrank is a renowned expert in cybersecurity and Governance, Risk Management, and Compliance (GRC). As the Founder and CEO of GRC Knight, he has spearheaded the integration of advanced detection technologies with comprehensive security and privacy compliance consulting. His rich experience includes key roles at TrustCloud, Cognizant, and Schellman & Company. In Today's episode, we talk about everything from CMMC 2.0, to our love of pizza.
Learn more about Frank Kyazze here:
Frank Kyazze's LinkedIn: https://www.linkedin.com/in/grcknight/
GRC Knight's website: https://www.linkedin.com/company/grcknight/ GRC Knight's
CMMC...
2024-01-1258 minThe Paramify Podcast#15 - Discussing Cybersecurity with Frank KyazzeFrank is a renowned expert in cybersecurity and Governance, Risk Management, and Compliance (GRC). As the Founder and CEO of GRC Knight, he has spearheaded the integration of advanced detection technologies with comprehensive security and privacy compliance consulting. His rich experience includes key roles at TrustCloud, Cognizant, and Schellman & Company. In Today's episode, we talk about everything from CMMC 2.0, to our love of pizza.
Learn more about Frank Kyazze here:
Frank Kyazze's LinkedIn: https://www.linkedin.com/in/grcknight/
GRC Knight's website: https://www.linkedin.com/company/grcknight/ GRC Knight's
CMMC...
2024-01-1258 minThe Paramify Podcast#14 - Discussing Cybersecurity with Josh Pugmire and Bryson LoughmillerIn today's episode, Kenny and Keaton talk with Josh Pugmire and Bryson Loughmiller. Both men are notable figures in cybersecurity, each boasting extensive careers marked by significant contributions to the field. Their expertise and experience have made them influential voices in cybersecurity circles.
Currently, they hold pivotal roles at Entrata, a leading technology company in the property management industry. Josh Pugmire serves as the Head of Compliance and Information Security, a role critical for ensuring that Entrata adheres to various cybersecurity standards and regulatory requirements. Josh is also a Board Member of SL|CISO a group that...
2023-12-2944 minThe Paramify Podcast#14 - Discussing Cybersecurity with Josh Pugmire and Bryson LoughmillerIn today's episode, Kenny and Keaton talk with Josh Pugmire and Bryson Loughmiller. Both men are notable figures in cybersecurity, each boasting extensive careers marked by significant contributions to the field. Their expertise and experience have made them influential voices in cybersecurity circles.
Currently, they hold pivotal roles at Entrata, a leading technology company in the property management industry. Josh Pugmire serves as the Head of Compliance and Information Security, a role critical for ensuring that Entrata adheres to various cybersecurity standards and regulatory requirements. Josh is also a Board Member of SL|CISO a group that...
2023-12-2944 minThe Paramify Podcast#13 - Discussing The Future of AI and Recruiting with Neal SchmidtIn today's episode, we talk with Neal Schmidt, the Founder of ScreenDoor.ai, about everything from our favorite concerts to where we think the future of AI and recruiting is going.
Neal Schmidt’s LinkedIn https://www.linkedin.com/in/nealschmidt/overlay/about-this-profile/
Neal’s business: https://screendoor.ai/
Learn more about Paramify here: https://www.paramify.com/
2023-12-151h 08The Paramify Podcast#13 - Discussing The Future of AI and Recruiting with Neal SchmidtIn today's episode, we talk with Neal Schmidt, the Founder of ScreenDoor.ai, about everything from our favorite concerts to where we think the future of AI and recruiting is going.
Neal Schmidt’s LinkedIn https://www.linkedin.com/in/nealschmidt/overlay/about-this-profile/
Neal’s business: https://screendoor.ai/
Learn more about Paramify here: https://www.paramify.com/
2023-12-151h 08The Paramify Podcast#12 - Discussing Mentorship and Cybersecurity with Blake EntrekinBlake Entrekin is an experienced Security Compliance leader with a notable 21-year tenure in the Security and Technology field, complemented by a decade of expertise as a people manager. He is currently the Director of Security Compliance at HackerOne.
In this episode, we discuss FedRAMP, compliance, cybersecurity, and the importance of having a mentor.
Learn more about Blake Entrekin:
https://www.linkedin.com/in/blake-entrekin/
Blakes's blog post about the new NIST control around public disclosure programs: https://www.hackerone.com/security-compliance/nist-vdp-control
Learn more about Paramify h...
2023-12-0155 minThe Paramify Podcast#12 - Discussing Mentorship and Cybersecurity with Blake EntrekinBlake Entrekin is an experienced Security Compliance leader with a notable 21-year tenure in the Security and Technology field, complemented by a decade of expertise as a people manager. He is currently the Director of Security Compliance at HackerOne.
In this episode, we discuss FedRAMP, compliance, cybersecurity, and the importance of having a mentor.
Learn more about Blake Entrekin:
https://www.linkedin.com/in/blake-entrekin/
Blakes's blog post about the new NIST control around public disclosure programs: https://www.hackerone.com/security-compliance/nist-vdp-control
Learn more about Paramify h...
2023-12-0155 minThe Paramify Podcast#11 - Discussing Cybersecurity with Bryce KunzBryce Kunz is a prominent Information Security Researcher and the Chief Security Officer (CSO) at UltraViolet Cyber. Renowned for his expertise in exploiting cloud environments, Bryce has a keen focus on critical systems like containers, orchestration systems, and web applications. His rich professional background spans across key agencies such as the NSA, DoD, DHS, and CBP, and extends into the tech industry with notable companies like Adobe. In his role at UltraViolet Cyber, Bryce combines his extensive experience in vulnerability research, penetration testing, and incident response to spearhead innovative cybersecurity strategies. His academic credentials are equally impressive, holding an...
2023-11-171h 14The Paramify Podcast#11 - Discussing Cybersecurity with Bryce KunzBryce Kunz is a prominent Information Security Researcher and the Chief Security Officer (CSO) at UltraViolet Cyber. Renowned for his expertise in exploiting cloud environments, Bryce has a keen focus on critical systems like containers, orchestration systems, and web applications. His rich professional background spans across key agencies such as the NSA, DoD, DHS, and CBP, and extends into the tech industry with notable companies like Adobe. In his role at UltraViolet Cyber, Bryce combines his extensive experience in vulnerability research, penetration testing, and incident response to spearhead innovative cybersecurity strategies. His academic credentials are equally impressive, holding an...
2023-11-171h 14The Paramify Podcast#10 - Exploring Joshua Baron’s Transition to a Referral Based BusinessIn today's episode, we sit down with seasoned criminal defense attorney, Joshua Baron, to delve into his journey of transitioning his law practice from being heavily ad-dependent to thriving on referrals.
When the COVID-19 pandemic hit and courtrooms shuttered, Joshua was faced with the daunting task of keeping his practice afloat amidst dwindling ad returns. His narrative of adaptation from spending over $30,000 monthly on ads to building a sustainable referral-based business model is nothing short of inspiring.
Get Joshua Baron's Book "The Business of Criminal Law: How to Build a Criminal Defense Practice You and...
2023-11-031h 10The Paramify Podcast#10 - Exploring Joshua Baron’s Transition to a Referral Based BusinessIn today's episode, we sit down with seasoned criminal defense attorney, Joshua Baron, to delve into his journey of transitioning his law practice from being heavily ad-dependent to thriving on referrals.
When the COVID-19 pandemic hit and courtrooms shuttered, Joshua was faced with the daunting task of keeping his practice afloat amidst dwindling ad returns. His narrative of adaptation from spending over $30,000 monthly on ads to building a sustainable referral-based business model is nothing short of inspiring.
Get Joshua Baron's Book "The Business of Criminal Law: How to Build a Criminal Defense Practice You and...
2023-11-031h 10The Paramify Podcast#9 - Discussing Information Security with Ryan JamiesonIn this episode of The Paramify Podcast, Kenny Scott talks with Ryan Jamieson, founder of Knit Security, about moving beyond compliance to achieve robust security. They discuss the challenges posed by security questionnaires and share practical advice on how to build a solid security posture aligned with business operations. Ryan also sheds light on his approach at Knit Security to ensure a company's security measures are in tune with its core business processes. Tune in for an enlightening discussion on making security work in the real world.
Ryan Jamieson's LinkedIn: https://www.linkedin.com/in/ryanjamieson/
2023-10-2042 minThe Paramify Podcast#9 - Discussing Information Security with Ryan JamiesonIn this episode of The Paramify Podcast, Kenny Scott talks with Ryan Jamieson, founder of Knit Security, about moving beyond compliance to achieve robust security. They discuss the challenges posed by security questionnaires and share practical advice on how to build a solid security posture aligned with business operations. Ryan also sheds light on his approach at Knit Security to ensure a company's security measures are in tune with its core business processes. Tune in for an enlightening discussion on making security work in the real world.
Ryan Jamieson's LinkedIn: https://www.linkedin.com/in/ryanjamieson/
2023-10-2042 minThe Paramify Podcast#8 - A Journey into Information Security with Derek EspirituCharting a successful trajectory in information security isn't a straightforward task, and who better to shed light on this journey than Derek Espiritu? In this insightful episode of The Paramify Podcast, hosts Kenny Scott and Keaton Olson explore Derek's path into the world of cybersecurity. Derek shares his experiences from working with renowned companies like Labelbox, Adobe, Anglepoint, and Symantec. From his early days in the industry to the milestones he achieved along the way, Derek's candid narrative provides a unique blend of inspiration and practical insights.
Want to delve even deeper into Derek's story? Join him...
2023-10-0647 minThe Paramify Podcast#8 - A Journey into Information Security with Derek EspirituCharting a successful trajectory in information security isn't a straightforward task, and who better to shed light on this journey than Derek Espiritu? In this insightful episode of The Paramify Podcast, hosts Kenny Scott and Keaton Olson explore Derek's path into the world of cybersecurity. Derek shares his experiences from working with renowned companies like Labelbox, Adobe, Anglepoint, and Symantec. From his early days in the industry to the milestones he achieved along the way, Derek's candid narrative provides a unique blend of inspiration and practical insights.
Want to delve even deeper into Derek's story? Join him...
2023-10-0647 minThe Paramify Podcast#7 - Discussing Information Security with Isaac PainterToday, we were privileged to sit down with Isaac Painter. An established figure in information security, Isaac boasts an impressive trajectory that includes stints at industry giants like Adobe and Aumni. His deep-rooted expertise and insights from various roles provide a rich backdrop for an enlightening conversation.
Isaac Painters LinkedIn: https://www.linkedin.com/in/isaac-painter-3861ab15/
Learn more about Paramify here: https://www.paramify.com/
2023-09-2243 minThe Paramify Podcast#7 - Discussing Information Security with Isaac PainterToday, we were privileged to sit down with Isaac Painter. An established figure in information security, Isaac boasts an impressive trajectory that includes stints at industry giants like Adobe and Aumni. His deep-rooted expertise and insights from various roles provide a rich backdrop for an enlightening conversation.
Isaac Painters LinkedIn: https://www.linkedin.com/in/isaac-painter-3861ab15/
Learn more about Paramify here: https://www.paramify.com/
2023-09-2243 minThe Paramify Podcast#6 - Discussing the Future of Sales with Next LvL AIToday we are joined by our good friends Tanner Green, and Dan Robinson of Next Lvl AI. We talk about everything from changing the cringe nature of LinkedIn through an AI bot to the theoretical possibilities of AI.
Tanner Green is the visionary founder and CEO of Next LvL Ai. Next LvL AI has merged AI's brilliance with sales to optimize representative interactions. Beyond technological prowess, he showcased his commitment to personal growth at Catalyst Life Coaching, guiding many through their life challenges. His stint as a software engineer at Domino Data Lab saw him significantly amplify...
2023-09-0845 minThe Paramify Podcast#6 - Discussing the Future of Sales with Next LvL AIToday we are joined by our good friends Tanner Green, and Dan Robinson of Next Lvl AI. We talk about everything from changing the cringe nature of LinkedIn through an AI bot to the theoretical possibilities of AI.
Tanner Green is the visionary founder and CEO of Next LvL Ai. Next LvL AI has merged AI's brilliance with sales to optimize representative interactions. Beyond technological prowess, he showcased his commitment to personal growth at Catalyst Life Coaching, guiding many through their life challenges. His stint as a software engineer at Domino Data Lab saw him significantly amplify...
2023-09-0845 minThe Paramify Podcast#5 - Exploring FedRAMP Rev 5 With Christian HansenIn this episode, we host Christian Hansen of Moss Adams. Christian delves into his foundational years in cybersecurity and traces his professional trajectory that led him to his current role. As an expert on FedRAMP, he provides an in-depth analysis of the recent changes introduced with FedRAMP Rev 5. Join us for an informative session with a leading expert in the field.
Christian Hansen's LinkedIn: https://www.linkedin.com/in/christian-hansen-3570b98/
Learn more about Paramify: https://www.paramify.com/
2023-08-2554 minThe Paramify Podcast#5 - Exploring FedRAMP Rev 5 With Christian HansenIn this episode, we host Christian Hansen of Moss Adams. Christian delves into his foundational years in cybersecurity and traces his professional trajectory that led him to his current role. As an expert on FedRAMP, he provides an in-depth analysis of the recent changes introduced with FedRAMP Rev 5. Join us for an informative session with a leading expert in the field.
Christian Hansen's LinkedIn: https://www.linkedin.com/in/christian-hansen-3570b98/
Learn more about Paramify: https://www.paramify.com/
2023-08-2554 minThe Paramify Podcast#4 - Becoming a CISO with Debra BakerToday Kenny talks to Debra Baker. Debra Baker is a passionate Cybersecurity Professional with over 20 years experience in multi-faceted, complex, fast-paced environments in the public and private sectors. Debra excels in Risk Management and Compliance with proven leadership experience on issues concerning information security. In her most recent role, she was the Director of Information Security (CISO) at RedSeal, Inc. She built the SOC2 program and within 6 months achieved SOC2 compliance for RedSeal's SaaS product Stratus. She built the information security program at RedSeal and managed all GRC (CC, FIPS, SOC2, FedRAMP, and GDPR) as well as third-party vendor...
2023-08-1138 minThe Paramify Podcast#4 - Becoming a CISO with Debra BakerToday Kenny talks to Debra Baker. Debra Baker is a passionate Cybersecurity Professional with over 20 years experience in multi-faceted, complex, fast-paced environments in the public and private sectors. Debra excels in Risk Management and Compliance with proven leadership experience on issues concerning information security. In her most recent role, she was the Director of Information Security (CISO) at RedSeal, Inc. She built the SOC2 program and within 6 months achieved SOC2 compliance for RedSeal's SaaS product Stratus. She built the information security program at RedSeal and managed all GRC (CC, FIPS, SOC2, FedRAMP, and GDPR) as well as third-party vendor...
2023-08-1138 minThe Paramify Podcast#3 - Kenny’s Backstory Pt. 2Today, Keaton & Adam talk to Kenny about his interesting past, from being a pioneer for the Adobe Common Controls Framework to starting a hedge fund, and what ultimately led Kenny to start Paramify.
Learn more about Paramify on our website: www.paramify.com
2023-07-2835 minThe Paramify Podcast#3 - Kenny’s Backstory Pt. 2Today, Keaton & Adam talk to Kenny about his interesting past, from being a pioneer for the Adobe Common Controls Framework to starting a hedge fund, and what ultimately led Kenny to start Paramify.
Learn more about Paramify on our website: www.paramify.com
2023-07-2835 minThe Paramify Podcast#2 - Using AI Securely with Walter HaydockWalter Haydock is a dynamic and multifaceted professional specializing in the intersection of cybersecurity and artificial intelligence. As the founder and CEO of StackAware, Walter leverages industry-standard frameworks, his own extensive experience, and responsible use of AI tools to help businesses manage AI-related cybersecurity, privacy, and compliance risks. Through StackAware, businesses can harness the power of new technologies by building effective and repeatable AI risk management programs.
Additionally, in his role as a Cybersecurity Author, Consultant, and Ghostwriter for Deploy Securely, Walter utilizes his expertise to transform cybersecurity CEOs into thought leaders within the industry. His approach...
2023-07-1443 minThe Paramify Podcast#2 - Using AI Securely with Walter HaydockWalter Haydock is a dynamic and multifaceted professional specializing in the intersection of cybersecurity and artificial intelligence. As the founder and CEO of StackAware, Walter leverages industry-standard frameworks, his own extensive experience, and responsible use of AI tools to help businesses manage AI-related cybersecurity, privacy, and compliance risks. Through StackAware, businesses can harness the power of new technologies by building effective and repeatable AI risk management programs.
Additionally, in his role as a Cybersecurity Author, Consultant, and Ghostwriter for Deploy Securely, Walter utilizes his expertise to transform cybersecurity CEOs into thought leaders within the industry. His approach...
2023-07-1443 min
The Paramify Podcast#1 - Kenny’s BackstoryWelcome to the genesis of The Paramify Podcast. Today, we uncover the beginning of Kenny's journey that culminated in the creation of Paramify.
LEARN MORE about Paramify here: https://www.paramify.com/
2023-07-0633 minThe Paramify Podcast#1 - Kenny’s BackstoryWelcome to the genesis of The Paramify Podcast. Today, we uncover the beginning of Kenny's journey that culminated in the creation of Paramify.
LEARN MORE about Paramify here: https://www.paramify.com/
2023-07-0633 min
Tales of Misadventure with Nicole DonnellyA Comedy of Errors: From Cow Town to ParamifyThe coolest ideas solve the biggest problems in the most boring of ways. Kenny Scott, CEO of Paramify, takes us on a wild journey from punk rock to cyber security compliance on today’s episode. Hear how he became a SaaS Startup founder, learned to trust those who know better, found the yin to his yang business partner, and discovered boring and painful were good things. Tune in for the laughs and stay for the inspiration. It’s an episode dedicated to everyone’s crush, Cow Town’s very own, Jimmy Zendejas. ABOUT KENNY SCOTTK...
2023-05-0351 min