Episode
From Misconfigurations to Mission Control: Lessons from InfoSec World 2025 - Rob Allen, Perry Schumacher, Marene Allison, Ryan Heritage, Patricia Titus, Dr. Ron Ross - ESW #435
- Published
- Dec 1, 2025
- Duration seconds
- 6203
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/enterprise-security-weekly-video-787162/episodes/from-misconfigurations-to-mission-control-lessons-from-infosec-world-2025-rob-allen-perry-schumacher-marene-allison-ryan-heritage-patricia-titus-dr-ron-ross-esw-435/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/enterprise-security-weekly-video-787162/from-misconfigurations-to-mission-control-lessons-from-infosec-world-2025-rob-allen-perry-schumacher-marene-allison-ryan-heritage-patricia-titus-dr-ron-ross-esw-435.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
Live from InfoSec World 2025, this episode of Enterprise Security Weekly features six in-depth conversations with leading voices in cybersecurity, exploring the tools, strategies, and leadership approaches driving the future of enterprise defense. From configuration management and AI-generated threats to emerging frameworks and national standards, this special edition captures the most influential conversations from this year's conference. In this episode: -You Don't Need a Hacker When You Have Misconfigurations — Rob Allen, Chief Product Officer at ThreatLocker®, discusses how overlooked settings and weak controls continue to be one of the most common causes of breaches. He explains how Defense Against Configurations (DAC) helps organizations identify, map, and remediate configuration risks before attackers can exploit them. -Security Challenges for Mid-Sized Companies — Perry Schumacher, Chief Strategy Officer & Partner at Ridge IT Cyber, explores the evolving security challenges facing mid-sized organizations. He discusses how AI is becoming a competitive advantage, how mobility and third-party reliance complicate defenses, and what steps these organizations can take to improve resilience and efficiency. -The Rise of Security Control Management: Secure by Design, Not by Chance — Marene Allison, former CISO of Johnson & Johnson, introduces Security Control Management (SCM), a new software category that unifies control selection, mapping, validation, and enforcement. She explains how SCM transforms fragmented compliance programs into proactive, embedded defense. -Engineered for Protection: The Rise of Security Control Management — Ryan Heritage, Advisor at Sicura, continues the discussion on SCM, explaining how organizations can operationalize this approach to move fr…