<![CDATA[Seiso Side-Up]]>Here we cut through the noise in cybersecurity.

This isn’t a show about perfect frameworks or polished slide decks. It’s a place for honest conversations about security strategy, governance, and risk as they actually exist inside real organizations - messy, evolving, and deeply tied to how the business runs.

Each episode explores what it really takes to build, operate, and sustain security programs that don’t get ignored, overcomplicated, or treated as a once-a-year exercise. We focus on clarity, ownership, and practical decision-making - especially for people early in their security careers or stepping into leadership for the first time.

Seiso works with mid-sized, regulated organizations that need cybersecurity to function day-to-day - not just during audits or incidents.

Our customers bring us in early, at the leadership level, because security decisions shape how the business grows, sells, and operates. We’re trusted as long-term operating partners, helping teams run, stabilize, and mature security programs over time.

That practitioner-driven, real-world experience is what shapes every conversation on Side-Up.

 

]]>https://seisollc.comRiverside.fm (https://riverside.com)Fri, 15 May 2026 22:16:21 GMTWed, 11 Feb 2026 17:30:39 GMT60Seiso, LLC.<p><b>Here we cut through the noise in cybersecurity.</b></p><p><b>This isn’t a show about perfect frameworks or polished slide decks. It’s a place for honest conversations about security strategy, governance, and risk as they actually exist inside real organizations - messy, evolving, and deeply tied to how the business runs.</b></p><p><b>Each episode explores what it really takes to build, operate, and sustain security programs that don’t get ignored, overcomplicated, or treated as a once-a-year exercise. We focus on clarity, ownership, and practical decision-making - especially for people early in their security careers or stepping into leadership for the first time.</b></p><p><b>Seiso works with mid-sized, regulated organizations that need cybersecurity to function day-to-day - not just during audits or incidents.</b></p><p><b>Our customers bring us in early, at the leadership level, because security decisions shape how the business grows, sells, and operates. We’re trusted as long-term operating partners, helping teams run, stabilize, and mature security programs over time.</b></p><p><b>That practitioner-driven, real-world experience is what shapes every conversation on Side-Up.</b></p><p> </p>episodicSeiso, LLC.lauren.shaffer@seisollc.comno<![CDATA[Episode 19 - Hacklore and Friends]]>The conversation explores the concept of 'hack lore' and its impact on cybersecurity, focusing on the disconnect between perceived security and actual security. It delves into the myths and misconceptions surrounding security, the role of AI in creating new hack lore, and the need to address the mundane aspects of security. The discussion also highlights the importance of holding companies accountable for customer security outcomes and the challenges of AI in cybersecurity. The conversation delves into the challenges of implementing AI and security in modern workflows, highlighting the need for a secure-by-design approach and the importance of understanding customer security outcomes. It also emphasizes the role of leadership in taking ownership of security and risk.

Takeaways

  • Hack lore: The conversation sheds light on the concept of 'hack lore' and its impact on cybersecurity, emphasizing the need to retire bad advice and focus on the basics.
  • AI and Hack Lore: The emergence of AI in cybersecurity introduces new challenges and misconceptions, leading to the creation of new hack lore around AI security advice and frameworks. Secure-by-design approach is crucial for AI and cloud systems
  • Leadership must take ownership of security and risk

Chapters

  • 00:00 AI and Hack Lore: The New Frontier
  • 25:26 Security as an Afterthought in AI Implementation
  • 31:11 Cultural Perspective on Applying Security Basics to AI
  • 39:31 Secure by Design in Real-world AI Environments
  • 45:25 Ownership of Risk and Accountability
  • 50:53 Implementing Secure by Design Principles
]]>cc0ebbcd-7aaf-43a4-b2db-e7d9386b2b07Tue, 28 Apr 2026 13:00:00 GMT<p>The conversation explores the concept of 'hack lore' and its impact on cybersecurity, focusing on the disconnect between perceived security and actual security. It delves into the myths and misconceptions surrounding security, the role of AI in creating new hack lore, and the need to address the mundane aspects of security. The discussion also highlights the importance of holding companies accountable for customer security outcomes and the challenges of AI in cybersecurity. The conversation delves into the challenges of implementing AI and security in modern workflows, highlighting the need for a secure-by-design approach and the importance of understanding customer security outcomes. It also emphasizes the role of leadership in taking ownership of security and risk.</p><p></p><p>Takeaways</p><ul><li>Hack lore: The conversation sheds light on the concept of 'hack lore' and its impact on cybersecurity, emphasizing the need to retire bad advice and focus on the basics.</li><li>AI and Hack Lore: The emergence of AI in cybersecurity introduces new challenges and misconceptions, leading to the creation of new hack lore around AI security advice and frameworks. Secure-by-design approach is crucial for AI and cloud systems</li><li>Leadership must take ownership of security and risk</li></ul><p></p><p>Chapters</p><ul><li>00:00 AI and Hack Lore: The New Frontier</li><li>25:26 Security as an Afterthought in AI Implementation</li><li>31:11 Cultural Perspective on Applying Security Basics to AI</li><li>39:31 Secure by Design in Real-world AI Environments</li><li>45:25 Ownership of Risk and Accountability</li><li>50:53 Implementing Secure by Design Principles</li></ul>no00:50:0019Episode 19 - Hacklore and Friendsfull<![CDATA[Episode 18 - vGRC Evolution Part II of II]]>The conversation delves into the evolving role of GRC professionals, emphasizing the non-negotiable skills, challenges, and the shift from compliance operators to strategic partners. It also explores the influence of GRC on business decisions, burnout prevention, and the importance of continuous learning and risk-based decision-making.

Takeaways

  • Technical understanding and fluency are non-negotiable skills for modern GRC professionals.
  • Risk management, continuous learning, and business context understanding are crucial for GRC professionals.
  • Data analytics and risk visualization play a significant role in GRC responsibilities.
  • GRC professionals are evolving from compliance operators to strategic partners, influencing business decisions earlier in the planning stage.
  • Challenges for GRC teams include continuous learning, resistance from within GRC and the business, and burnout prevention.
  • Leadership can better support evolving GRC roles by involving GRC professionals in strategic conversations early and building trust.
  • Prioritizing cloud hosting, security, and AI technology skills is essential for GRC professionals.
  • A risk-based approach and proactive decision-making are crucial mindset shifts for modern GRC teams.

Chapters

  • 00:00 Skills for Modern GRC Professionals
  • 11:08 GRC as a Strategic Partner
  • 17:20 Challenges and Growing Pains
  • 22:37 Preventing Burnout
]]>8e2775cd-059c-49be-97c1-f8830dde0059Mon, 30 Mar 2026 19:49:19 GMT<p>The conversation delves into the evolving role of GRC professionals, emphasizing the non-negotiable skills, challenges, and the shift from compliance operators to strategic partners. It also explores the influence of GRC on business decisions, burnout prevention, and the importance of continuous learning and risk-based decision-making.</p><p></p><p>Takeaways</p><ul><li>Technical understanding and fluency are non-negotiable skills for modern GRC professionals.</li><li>Risk management, continuous learning, and business context understanding are crucial for GRC professionals.</li><li>Data analytics and risk visualization play a significant role in GRC responsibilities.</li><li>GRC professionals are evolving from compliance operators to strategic partners, influencing business decisions earlier in the planning stage.</li><li>Challenges for GRC teams include continuous learning, resistance from within GRC and the business, and burnout prevention.</li><li>Leadership can better support evolving GRC roles by involving GRC professionals in strategic conversations early and building trust.</li><li>Prioritizing cloud hosting, security, and AI technology skills is essential for GRC professionals.</li><li>A risk-based approach and proactive decision-making are crucial mindset shifts for modern GRC teams.</li></ul><p></p><p>Chapters</p><ul><li>00:00 Skills for Modern GRC Professionals</li><li>11:08 GRC as a Strategic Partner</li><li>17:20 Challenges and Growing Pains</li><li>22:37 Preventing Burnout</li></ul>no00:30:40218Episode 18 - vGRC Evolution Part II of IIfull<![CDATA[Episode 18 - vGRC Evolution Part I of II]]>The podcast episode explores the evolution of GRC roles, the impact of automation on GRC tasks, and the strategic shift in GRC expectations. It also delves into the measurement of the value of GRC beyond passing audits. The conversation highlights the expanding nature of GRC roles and the significant impact of automation on GRC tasks.

Takeaways

  • GRC roles are expanding
  • Automation has significantly impacted GRC tasks

Chapters

  • 00:00 Evolution of GRC Roles
  • 05:31 Impact of Automation on GRC Tasks
  • 21:31 Measuring the Value of GRC
]]>62a2c7a1-0971-4f4b-acdc-7b60b1c3da71Wed, 04 Mar 2026 19:45:00 GMT<p>The podcast episode explores the evolution of GRC roles, the impact of automation on GRC tasks, and the strategic shift in GRC expectations. It also delves into the measurement of the value of GRC beyond passing audits. The conversation highlights the expanding nature of GRC roles and the significant impact of automation on GRC tasks.</p><p></p><p>Takeaways</p><ul><li>GRC roles are expanding</li><li>Automation has significantly impacted GRC tasks</li></ul><p></p><p>Chapters</p><ul><li>00:00 Evolution of GRC Roles</li><li>05:31 Impact of Automation on GRC Tasks</li><li>21:31 Measuring the Value of GRC</li></ul>no00:26:4018Episode 18 - vGRC Evolution Part I of IIfull<![CDATA[Episode 15 - Building Trust and Compliance: Guiding a Client to CMMC Level 2 Certification]]>In this episode, we take you behind the scenes of how our team helped a client successfully achieve CMMC Level 2 certification. From assessing gaps and aligning controls to overcoming legacy system challenges and navigating the audit process, we break down each step of the journey. You’ll hear how collaboration, governance, and a clear security roadmap turned a complex compliance goal into a milestone achievement. Whether you’re preparing for your own certification or just curious about how CMMC impacts business resilience, this episode offers practical insights and lessons learned straight from the field.

]]>https://Seisosideup.podbean.com/e/episode-15-building-trust-and-compliance-guiding-a-client-to-cmmc-level-2-certification/Seisosideup.podbean.com/e332fea6-ff56-3c40-aaab-91a868f3ee9aTue, 28 Oct 2025 12:45:25 GMT<p>In this episode, we take you behind the scenes of how our team helped a client successfully achieve CMMC Level 2 certification. From assessing gaps and aligning controls to overcoming legacy system challenges and navigating the audit process, we break down each step of the journey. You’ll hear how collaboration, governance, and a clear security roadmap turned a complex compliance goal into a milestone achievement. Whether you’re preparing for your own certification or just curious about how CMMC impacts business resilience, this episode offers practical insights and lessons learned straight from the field.</p> no00:13:1015Episode 15 - Building Trust and Compliance: Guiding a Client to CMMC Level 2 Certificationfull<![CDATA[2024 Seiso Side-Up Podcast Recap]]>In this episode, we kick off season 2 of the podcast with a recap of a few episodes from 2024. 

]]>https://Seisosideup.podbean.com/e/2024-seiso-side-up-podcast-recap/Seisosideup.podbean.com/88869e0f-7dc6-3e71-9c31-df0d85b3b29aTue, 14 Jan 2025 17:48:50 GMT<p>In this episode, we kick off season 2 of the podcast with a recap of a few episodes from 2024. </p> no00:13:24212024 Seiso Side-Up Podcast Recapfull<![CDATA[Episode 8 - Intrinsic Motivation and Work-Life Harmony]]>In this episode, we invited special guest Ken Presutti, an Agile coach and sports endurance coach, to discuss the value behind intrinsic motivation and how it can tie both personal and professional goals together.

It's that time of year where organizations and individuals seek to establish their annual objectives and goals to meet the needs of the business, and in our industry, look to the year ahead to improve their cybersecurity strategy. We'll also discuss ways that Seiso enables a better work-life harmony for our workforce, and ways you can align your personal values with your professional milestones and initiatives.

]]>https://Seisosideup.podbean.com/e/episode-8-intrinsic-motivation-and-work-life-harmony/Seisosideup.podbean.com/44e486a3-6678-3eb3-8183-55cb57e1e97eWed, 18 Dec 2024 21:54:13 GMT<p>In this episode, we invited special guest Ken Presutti, an Agile coach and sports endurance coach, to discuss the value behind intrinsic motivation and how it can tie both personal and professional goals together.</p> <p>It's that time of year where organizations and individuals seek to establish their annual objectives and goals to meet the needs of the business, and in our industry, look to the year ahead to improve their cybersecurity strategy. We'll also discuss ways that Seiso enables a better work-life harmony for our workforce, and ways you can align your personal values with your professional milestones and initiatives.</p> no00:32:1819Episode 8 - Intrinsic Motivation and Work-Life Harmonyfull<![CDATA[Episode 16 - How to Become a Human Firewall]]>In this episode, Joe Wynn and Taylor Lee join Lauren to discuss How to Win Friends and Influence People and Crucial Conversations books. They discuss how to correctly communication phishing attacks, how to listen with empathy and how to lead by example.  Listen to this episode to learn how to become a human firewall. 

]]>https://Seisosideup.podbean.com/e/how-to-become-a-human-firewall/Seisosideup.podbean.com/bd7296b0-3354-3174-a9ee-6f4a2bb8dc75Mon, 01 Dec 2025 22:00:57 GMT<p>In this episode, Joe Wynn and Taylor Lee join Lauren to discuss <a rel="noopener noreferrer nofollow">How to Win Friends and Influence People</a> and <a href="https://amzn.to/4pFDwn0%20" rel="noopener noreferrer nofollow">Crucial Conversations</a> books. They discuss how to correctly communication phishing attacks, how to listen with empathy and how to lead by example.  Listen to this episode to learn how to become a human firewall. </p> no00:20:2816Episode 16 - How to Become a Human Firewallfull<![CDATA[Episode 4 - GRC Evolution]]>Listen in as Seiso GRC Engineers discuss the evolution of the practice through a commonly known set of informations security and risk scenarios that focus on security best practices, resiliency, and the overarching guardrails to keep everything operating in harmony. 

]]>https://Seisosideup.podbean.com/e/episode-4-grc-evolution/Seisosideup.podbean.com/c1c2305c-8286-3ddc-aee1-3e266680fb62Thu, 01 Aug 2024 13:29:00 GMT<p>Listen in as Seiso GRC Engineers discuss the evolution of the practice through a commonly known set of informations security and risk scenarios that focus on security best practices, resiliency, and the overarching guardrails to keep everything operating in harmony. </p> no00:25:045Episode 4 - GRC Evolutionfull<![CDATA[Episode 10 - Getting Started in Cyber and Continuous Education]]>During this episode, we're joined by Seiso engineers and consultants to discuss their individual paths to breaking into the cybersecurity industry and how they lay out their ongoing knowledge growth. We also discuss our recommendations for new and upcoming cybersecurity engineers in developing their skills. Finally, we round out the episode with a conversation on the ins and outs of being master of one or jack of all trades (or somewhere in between). 

]]>https://Seisosideup.podbean.com/e/episode-10-getting-started-in-cyber-and-continuous-education/Seisosideup.podbean.com/fd778be8-b069-3850-8312-7e969c9d5c69Fri, 28 Feb 2025 16:29:27 GMT<p>During this episode, we're joined by Seiso engineers and consultants to discuss their individual paths to breaking into the cybersecurity industry and how they lay out their ongoing knowledge growth. We also discuss our recommendations for new and upcoming cybersecurity engineers in developing their skills. Finally, we round out the episode with a conversation on the ins and outs of being master of one or jack of all trades (or somewhere in between). </p> no00:32:04210Episode 10 - Getting Started in Cyber and Continuous Educationfull<![CDATA[Episode 3 - Meet the Seiso CMMC Experts]]>Senior GRC Engineer Heidi Patrick and Security Consultant Justin Fearon talk all things CMMC. In this episode, we discuss the gotcha's when approaching CMMC compliance and how Seiso facilitates a process to reach CMMC readiness with creativity, allowing our customers to achieve their cybersecurity goals and eventually move towards the assessment process against CMMC requirements.

]]>https://Seisosideup.podbean.com/e/episode-3-meet-the-seiso-cmmc-experts/Seisosideup.podbean.com/26015a3e-b387-3d0a-87c8-534d7cbd5edcThu, 06 Jun 2024 18:55:40 GMT<p>Senior GRC Engineer Heidi Patrick and Security Consultant Justin Fearon talk all things CMMC. In this episode, we discuss the gotcha's when approaching CMMC compliance and how Seiso facilitates a process to reach CMMC readiness with creativity, allowing our customers to achieve their cybersecurity goals and eventually move towards the assessment process against CMMC requirements.</p> no00:26:1614Episode 3 - Meet the Seiso CMMC Expertsfull<![CDATA[Episode 13 - HIPAA Security Rule Updates]]>In this episode, we'll review the proposed updates to the HIPAA Security Rule and discuss the challenges that organizations encounter when becoming HIPAA compliant or maintaining HIPAA compliance through these changes.

We also dive into the complexities and differences between HIPAA compliance in the cloud, versus on-prem, and how compliance automation can be a game changer in keeping up with these changes.

#vGRC #HIPAA #cybersecurity #riskmanagement

]]>https://Seisosideup.podbean.com/e/episode-13-hipaa-security-rule-updates/Seisosideup.podbean.com/0d09b1e8-f923-3cf6-b121-21b0dc5d3754Fri, 30 May 2025 15:59:00 GMT<p>In this episode, we'll review the proposed updates to the HIPAA Security Rule and discuss the challenges that organizations encounter when becoming HIPAA compliant or maintaining HIPAA compliance through these changes.</p> <p>We also dive into the complexities and differences between HIPAA compliance in the cloud, versus on-prem, and how compliance automation can be a game changer in keeping up with these changes.</p> <p>#vGRC #HIPAA #cybersecurity #riskmanagement</p> no00:36:49213Episode 13 - HIPAA Security Rule Updatesfull<![CDATA[Episode 7 - Ethics in Cybersecurity]]>In this episode, GRC Engineer Justin Fearon and CEO Joe Wynn discuss the importance of ethics and integrity in cybersecurity.  Join us on the Seiso Side Up Podcast as Justin and Joe deep-dive into the intent behind the book The Code of Honor - Embracing Ethics in Cybersecurity, written by Paul J Maurer and Ed Skoudis. You can purchase your copy of the book here: https://www.amazon.com/Code-Honor-Embracing-Ethics-Cybersecurity/dp/1394275862

Look for more information on this topic, as presented by Simon Simek, in this video: https://youtu.be/zP9jpxitfb4?si=9Cvr0ZYTlFepaln3

]]>https://Seisosideup.podbean.com/e/episode-7-ethics-in-cybersecurity/Seisosideup.podbean.com/177245fc-1611-3f66-a465-da8057a5c87eWed, 20 Nov 2024 14:12:43 GMT<p>In this episode, GRC Engineer Justin Fearon and CEO Joe Wynn discuss the importance of ethics and integrity in cybersecurity.  Join us on the Seiso Side Up Podcast as Justin and Joe deep-dive into the intent behind the book The Code of Honor - Embracing Ethics in Cybersecurity, written by Paul J Maurer and Ed Skoudis. You can purchase your copy of the book here: https://www.amazon.com/Code-Honor-Embracing-Ethics-Cybersecurity/dp/1394275862</p> <p>Look for more information on this topic, as presented by Simon Simek, in this video: https://youtu.be/zP9jpxitfb4?si=9Cvr0ZYTlFepaln3</p> no00:24:5518Episode 7 - Ethics in Cybersecurityfull<![CDATA[Episode 2 - Meet the Seiso Founders]]>Joe Wynn (CEO) and Jon Zeolla (CTO) tell us about how and why they started https://seisollc.com and even more about where Seiso is headed through continuous innovation, constant learning, and bringing creative, frictionless information security / risk management practices to the Seiso customers. 

Tune in to hear all about Seiso origin stories and some special segments that give you the insight into what makes Seiso a great business partner.

]]>https://Seisosideup.podbean.com/e/episode-2-meet-the-seiso-founders/Seisosideup.podbean.com/1eded267-05f7-3886-90f0-89f9f190b9daThu, 06 Jun 2024 18:56:15 GMT<p>Joe Wynn (CEO) and Jon Zeolla (CTO) tell us about how and why they started <a href="https://seisollc.com" rel="noopener noreferrer nofollow">https://seisollc.com</a> and even more about where Seiso is headed through continuous innovation, constant learning, and bringing creative, frictionless information security / risk management practices to the Seiso customers. </p> <p>Tune in to hear all about Seiso origin stories and some special segments that give you the insight into what makes Seiso a great business partner.</p> no00:48:0013Episode 2 - Meet the Seiso Foundersfull<![CDATA[Episode 12 - What is vGRC, really?]]>Listen in as we discuss the Seiso vGRC model with CEO Joe Wynn and COO Eric Lansbery. We'll cover topics from various angles of the Governance, Risk, and Compliance needs of Seiso customers, tell some real-life stories about how the vGRC model can benefit your organization, and even have a friendly debate about the efficacy of what we all come to know as vCISO, in the modern information security services industry.

]]>https://Seisosideup.podbean.com/e/episode-12-what-is-vgrc-really/Seisosideup.podbean.com/bb93205f-386f-310c-966e-82043faf096eMon, 28 Apr 2025 23:11:40 GMT<p>Listen in as we discuss the Seiso vGRC model with CEO Joe Wynn and COO Eric Lansbery. We'll cover topics from various angles of the Governance, Risk, and Compliance needs of Seiso customers, tell some real-life stories about how the vGRC model can benefit your organization, and even have a friendly debate about the efficacy of what we all come to know as vCISO, in the modern information security services industry.</p> no00:21:55212Episode 12 - What is vGRC, really?full<![CDATA[Episode 0 - Meet the Hosts]]>In this episode, our Seiso Side-Up co-hosts talk about what this podcast is all about, segments that we'll showcase, and a little background on our co-hosts themselves. 

]]>https://Seisosideup.podbean.com/e/episode-0-meet-the-hosts/Seisosideup.podbean.com/acc2cc29-8e0a-3f89-85cd-87d87a807ce5Wed, 15 May 2024 17:19:11 GMT<p>In this episode, our Seiso Side-Up co-hosts talk about what this podcast is all about, segments that we'll showcase, and a little background on our co-hosts themselves. </p> no00:02:5111Episode 0 - Meet the Hostsfull<![CDATA[Episode 6 - PCI Compliance and Pentesting]]>On this episode of the Seiso Side Up podcast, we welcome two guests - Jake Mayhew and Justin Leapline. Jake has decades of experience performing and teaching the ins and outs of penetration testing, at times performing tests for companies that handle cardholder data, and Justin is a subject matter expert in the world of PCI (Payment Card Industry) security & compliance. Join us as we dive into the gotchas of becoming PCI compliant and how to best approach penetration testing as part of the PCI compliance journey.

]]>https://Seisosideup.podbean.com/e/episode-6-pci-compliance-and-pentesting/Seisosideup.podbean.com/ff843754-1e57-3501-95cd-06af3fda83b7Tue, 01 Oct 2024 10:35:00 GMT<p>On this episode of the Seiso Side Up podcast, we welcome two guests - Jake Mayhew and Justin Leapline. Jake has decades of experience performing and teaching the ins and outs of penetration testing, at times performing tests for companies that handle cardholder data, and Justin is a subject matter expert in the world of PCI (Payment Card Industry) security &amp; compliance. Join us as we dive into the gotchas of becoming PCI compliant and how to best approach penetration testing as part of the PCI compliance journey.</p> no00:39:0617Episode 6 - PCI Compliance and Pentestingfull<![CDATA[Episode 17 - New Year, Same AI Risks]]>AI is no longer experimental—it’s embedded in enterprise systems, security operations, and everyday business tools. In this episode of The Seiso Side-Up Podcast, host Lauren Shaffer joins Seiso COO Eric Lansbery and co-host Heidi Patrick to discuss why AI security, AI governance, and risk management are now critical priorities. The conversation covers the evolution of AI adoption and the real risks organizations face, including model poisoning, data leakage, hallucinations, and unmanaged GenAI use. Eric shares practical guidance on applying NIST AI Risk Management Framework, ISO/IEC standards, ethical AI, and GRC best practices to build secure, compliant, and resilient AI programs. This episode delivers key 2026 AI governance takeaways for security leaders, GRC professionals, and executives looking to manage AI risk, meet regulatory expectations, and strengthen enterprise trust.

     ]]>https://Seisosideup.podbean.com/e/episode-17-new-year-same-ai-risks/Seisosideup.podbean.com/30065272-55b3-3292-9dd9-6bf5c9e86fb6Wed, 14 Jan 2026 13:27:26 GMT <p>AI is no longer experimental—it’s embedded in enterprise systems, security operations, and everyday business tools. In this episode of The Seiso Side-Up Podcast, host Lauren Shaffer joins Seiso COO Eric Lansbery and co-host Heidi Patrick to discuss why AI security, AI governance, and risk management are now critical priorities. The conversation covers the evolution of AI adoption and the real risks organizations face, including model poisoning, data leakage, hallucinations, and unmanaged GenAI use. Eric shares practical guidance on applying NIST AI Risk Management Framework, ISO/IEC standards, ethical AI, and GRC best practices to build secure, compliant, and resilient AI programs. This episode delivers key 2026 AI governance takeaways for security leaders, GRC professionals, and executives looking to manage AI risk, meet regulatory expectations, and strengthen enterprise trust.</p>      no00:19:1517Episode 17 - New Year, Same AI Risksfull<![CDATA[Episode 5 - easy_infra]]>On this episode, CTO Jon Zeolla and Sr. Security Engineer Keith Holland discuss the inner-workings of the Seiso open source project, easy_infra.

easy_infra is a docker container that simplifies and secures Infrastructure as Code deployments by running security scans prior to running IaC tools. It supports three main use cases:

  1. Experimentation by supporting interactive use and secure troubleshooting.
  2. Continuous Integration as a part of Pull/Merge Request validation.
  3. Continuous Deployment as an automated deployment tool.

https://github.com/SeisoLLC/easy_infra

]]>https://Seisosideup.podbean.com/e/episode-5-easy_infra/Seisosideup.podbean.com/d5b94b98-3ebd-3dac-969b-f9f91b67fb87Fri, 30 Aug 2024 15:05:00 GMT<p>On this episode, CTO Jon Zeolla and Sr. Security Engineer Keith Holland discuss the inner-workings of the Seiso open source project, easy_infra.</p> <p>easy_infra is a docker container that simplifies and secures Infrastructure as Code deployments by running security scans prior to running IaC tools. It supports three main use cases:</p> <ol><li>Experimentation by supporting interactive use and secure troubleshooting.</li> <li>Continuous Integration as a part of Pull/Merge Request validation.</li> <li>Continuous Deployment as an automated deployment tool.</li> </ol><p>https://github.com/SeisoLLC/easy_infra</p> no00:29:1316Episode 5 - easy_infrafull<![CDATA[Episode 14 - Tackling Business Growth with GCC and vGRC]]>On this episode, we have a special guest, Sourabh Moharil, Managing Director and Co-Founder of the Global Capability Center (GCC) company Agilite. Seiso CEO Joe Wynn joins our co-hosts, Lauren Shaffer and Eric Lansbery, to navigate the value behind establishing a GCC while integrating with a vGRC model to develop, maintain, and continuously improve compliance at that scale of business growth operations.

Listen in on this very special episode and learn more about how GCC and vGRC can help to simplify security while upscaling your company strategically - for start-ups and well-established businesses alike.

]]>https://Seisosideup.podbean.com/e/episode-13-tackling-business-growth-with-gcc-and-vgrc/Seisosideup.podbean.com/81ee9754-8aa7-3e47-bda8-0970a9e02154Sun, 03 Aug 2025 13:57:05 GMT<p>On this episode, we have a special guest, Sourabh Moharil, Managing Director and Co-Founder of the Global Capability Center (GCC) company Agilite. Seiso CEO Joe Wynn joins our co-hosts, Lauren Shaffer and Eric Lansbery, to navigate the value behind establishing a GCC while integrating with a vGRC model to develop, maintain, and continuously improve compliance at that scale of business growth operations.</p> <p>Listen in on this very special episode and learn more about how GCC and vGRC can help to simplify security while upscaling your company strategically - for start-ups and well-established businesses alike.</p> no00:27:02214Episode 14 - Tackling Business Growth with GCC and vGRCfull<![CDATA[Episode 1 - The Original Rebel Scrum Team]]>Senior Security Engineer Keith Holland and Lead Security Engineer Sean Cavanaugh talk about the intricacies and challenges facing application security practitioners in today's modern cloud-based software development world. The Original Rebel Scrum team was formed as Seiso adopted the Agile methodology to project management, lead by co-host Lauren Shaffer. Throughout their time at Seiso, both Sean and Keith have helped grow the DevSecOps, Web Application Pentesting, and Product Security practices.

]]>https://Seisosideup.podbean.com/e/episode-1-the-original-rebel-scrum-team/Seisosideup.podbean.com/f2451f8c-4546-3d39-ae72-6880c8d38986Thu, 06 Jun 2024 18:56:05 GMT<p>Senior Security Engineer Keith Holland and Lead Security Engineer Sean Cavanaugh talk about the intricacies and challenges facing application security practitioners in today's modern cloud-based software development world. The Original Rebel Scrum team was formed as Seiso adopted the Agile methodology to project management, lead by co-host Lauren Shaffer. Throughout their time at Seiso, both Sean and Keith have helped grow the DevSecOps, Web Application Pentesting, and Product Security practices.</p> no00:25:0112Episode 1 - The Original Rebel Scrum Teamfull<![CDATA[Episode 11 - AI Advancement & Security Concerns]]>Listen in as our podcast host, Lauren Shaffer, our special guest Travis Buckinham, along with Seiso Co-Founder Jon Zeolla discuss the advancements in AI and the security concerns related to AI in healthcare, finance, and other industries. 

What is the industry doing to address these concerns?

What can the world expect from AI in healthcare now, and in the near future?

How helpful is AI when introduced into the supply-chain?

Referenced article: https://www.techspot.com/news/106289-medical-misinformation-ai-training-data-poses-significant-risks.html

 

]]>https://Seisosideup.podbean.com/e/episode-11-ai-advancement-security-concerns/Seisosideup.podbean.com/849a5646-9c1a-39ee-957c-5971c81e7cb6Mon, 24 Mar 2025 18:03:11 GMT<p>Listen in as our podcast host, Lauren Shaffer, our special guest Travis Buckinham, along with Seiso Co-Founder Jon Zeolla discuss the advancements in AI and the security concerns related to AI in healthcare, finance, and other industries. </p> <p>What is the industry doing to address these concerns?</p> <p>What can the world expect from AI in healthcare now, and in the near future?</p> <p>How helpful is AI when introduced into the supply-chain?</p> <p>Referenced article: https://www.techspot.com/news/106289-medical-misinformation-ai-training-data-poses-significant-risks.html</p> <p> </p> no00:45:08211Episode 11 - AI Advancement & Security Concernsfull