<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" 
    xmlns:dc="http://purl.org/dc/elements/1.1/"
    xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
    xmlns:admin="http://webns.net/mvcb/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd">
	<channel>
<title>CSO Andy</title><link>https://origin.csoandy.com/index.html</link><description>Recorded Talks given by Andy Ellis</description><dc:language>en</dc:language><language>en</language><dc:date>2023-06-10T21:38:53-04:00</dc:date><admin:generatorAgent rdf:resource="http://www.realmacsoftware.com/" />
<sy:updatePeriod>hourly</sy:updatePeriod>
<sy:updateFrequency>1</sy:updateFrequency>
<sy:updateBase>2000-01-01T12:00+00:00</sy:updateBase>
<lastBuildDate>Sat, 10 Jun 2023 22:13:49 -0400</lastBuildDate><item><title>Stop Destroying Value</title><dc:subject>Talks</dc:subject><dc:date>2023-06-10T21:38:53-04:00</dc:date><link>https://origin.csoandy.com/talks/files/leadership-disciplines.html#unique-entry-id-22</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/leadership-disciplines.html#unique-entry-id-22</guid><content:encoded><![CDATA[<h1>Stop Destroying Value: Six Leadership Disciplines</h1><span style="font-size:11px; "><img class="imageStyle" alt="LV-title" src="https:/origin.csoandy.com/talks/files/lv-title.jpg" width="634" height="357" /></span><br /><span style="font-size:15px; ">Work is the conversion of energy (from people) into value (for an organization).  It doesn't matter if the organization is </span><span style="font-size:15px; "><em>employment</em></span><span style="font-size:15px; ">; this definition holds for community organizations, non-profits, social activities, and even families. Leadership is the activities that modify this conversion.  Hopefully for the better, but often times for the worse.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-destroy" src="https:/origin.csoandy.com/talks/files/lv-destroy.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">Most of the ways that leadership shows up is in </span><span style="font-size:15px; "><em>destroying</em></span><span style="font-size:15px; "> value by wasting the energy of your team.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-Disciplines" src="https:/origin.csoandy.com/talks/files/lv-disciplines.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">There are six disciplines that leaders can work on to improve the value created from energy; sometimes by wasting less energy, sometimes by managing the conversion into value better, and sometimes by better use of the value created.  Each discipline, poorly practiced, is sufficient to destroy value, so you can't afford to overspecialize.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-balance" src="https:/origin.csoandy.com/talks/files/lv-balance.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">You need to balance your leadership, and improve whatever you're </span><span style="font-size:15px; "><em>worst</em></span><span style="font-size:15px; "> at.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-matrix" src="https:/origin.csoandy.com/talks/files/lv-matrix.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">A quick look at some skills, that support each of these disciplines.  Some skills are skills an individual can apply to themselves; others are for leaders to apply to their teammates; and some are applicable across an entire organization.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-wellness" src="https:/origin.csoandy.com/talks/files/lv-wellness.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">Wellness: maximize the energy brought into the organization.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-inclusion" src="https:/origin.csoandy.com/talks/files/lv-inclusion.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">Inclusion: reduce the energy cost people pay just to exist in a space.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-inspiration" src="https:/origin.csoandy.com/talks/files/lv-inspiration.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">Inspiration: align people's desire to do work with the organization's need for work.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-development" src="https:/origin.csoandy.com/talks/files/lv-development.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">Development: give people the skills to change the world.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-planning" src="https:/origin.csoandy.com/talks/files/lv-planning.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">Planning: ensure that work isn't wasted, and that opportunities are seized.<br /><br /></span><span style="font-size:15px; "><img class="imageStyle" alt="LV-alignment" src="https:/origin.csoandy.com/talks/files/lv-alignment.jpg" width="634" height="357" /></span><span style="font-size:15px; "><br /></span><span style="font-size:15px; ">Alignment: keep teams from working at cross-purposes.<br /><br />If you'd like more information about any of these skills, they, and dozens more, are covered in </span><span style="font-size:15px; "><a href="../book/" title="1% Leadership">1% Leadership</a></span><span style="font-size:15px; ">.  I also have a </span><span style="font-size:15px; "><a href="https://duhaone.substack.com/">weekly newsletter</a></span><span style="font-size:15px; ">; a free subscription gets you 75% of its content each week, delivered in short, easy-to consume lesson.<br /></span><br /><br /><br /><br /><br /><br />]]></content:encoded></item><item><title>How to CISO in the Cloud</title><dc:subject>Talks</dc:subject><dc:date>2023-03-28T15:09:45-04:00</dc:date><link>https://origin.csoandy.com/talks/files/2023-03-28-HtC-in-the-cloud.html#unique-entry-id-20</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/2023-03-28-HtC-in-the-cloud.html#unique-entry-id-20</guid><content:encoded><![CDATA[Cloud Security Alliance's Threats and Vulnerabilities Summit<br /><br /><a href="https://www.brighttalk.com/webcast/10415/578399"><img class="imageStyle" alt="Screen Shot 2023-03-30 at 2.32.55 PM" src="https:/origin.csoandy.com/talks/files/screen-shot-2023-03-30-at-2.32.55-pm.png" width="592" height="335" /></a><br /><a href="https://origin.csoandy.com/resources/Slides/How-to-CISO-in-the-Cloud--AE---2023-03.pptx.pdf">Slides</a>]]></content:encoded></item><item><title>AppSec Metrics that Matter</title><dc:subject>Talks</dc:subject><dc:date>2022-09-13T21:36:21-04:00</dc:date><link>https://origin.csoandy.com/talks/files/2022-09-13-AppSecConf.html#unique-entry-id-19</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/2022-09-13-AppSecConf.html#unique-entry-id-19</guid><content:encoded><![CDATA[<iframe src="https://player.vimeo.com/video/749264201?h=5db021aa02&title=0&byline=0&portrait=0" width="640" height="360" frameborder="0" allow="autoplay; fullscreen; picture-in-picture" allowfullscreen></iframe><br /><p><a href="https://vimeo.com/749264201">Andy Ellis Live Recording</a> from <a href="https://vimeo.com/digitalanarchist">Digital Anarchist Network</a> on <a href="https://vimeo.com">Vimeo</a>.</p>]]></content:encoded></item><item><title>Building a Security Program: Four Dimensions</title><dc:subject>Talks</dc:subject><dc:date>2022-06-24T12:51:18-04:00</dc:date><link>https://origin.csoandy.com/talks/files/2022-06-24-four%20dimensions.html#unique-entry-id-17</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/2022-06-24-four%20dimensions.html#unique-entry-id-17</guid><content:encoded><![CDATA[RSAC 2022, Evanta 2022<br /><iframe width="560" height="315" src="https://www.youtube.com/embed/sbL49A5Tfw8" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br /><br /><a href="https://origin.csoandy.com/resources/Slides/Building-a-Security-Program----Andy-Ellis----2022-05-16.pptx.pdf">Slides</a>]]></content:encoded></item><item><title>Avoiding Insidious Points of Compromise in Infrastructure Access Systems</title><dc:subject>Talks</dc:subject><dc:date>2021-06-23T17:40:21-04:00</dc:date><link>https://origin.csoandy.com/talks/files/2021-06-23-devseccon.html#unique-entry-id-14</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/2021-06-23-devseccon.html#unique-entry-id-14</guid><content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube.com/embed/Dbuoyy0lN74" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br /><br />Presented at DevSecCon]]></content:encoded></item><item><title>Risk at the Margin</title><dc:subject>Talks</dc:subject><dc:date>2021-05-13T15:34:14-04:00</dc:date><link>https://origin.csoandy.com/talks/files/3c8c04d893036c660878da43cb37046f-13.html#unique-entry-id-13</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/3c8c04d893036c660878da43cb37046f-13.html#unique-entry-id-13</guid><content:encoded><![CDATA[Brilliant Labs / Labos Cr&eacute;atifs<br /><br /><iframe width="560" height="315" src="https://www.youtube.com/embed/XaWtQmy62S4" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>]]></content:encoded></item><item><title>Human Decision-making in the Era of Coronavirus</title><dc:subject>Talks</dc:subject><dc:date>2020-08-12T19:20:33-04:00</dc:date><link>https://origin.csoandy.com/talks/files/corona-decisioning.html#unique-entry-id-9</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/corona-decisioning.html#unique-entry-id-9</guid><content:encoded><![CDATA[Tactical Edge, Online, 2020<br /><br /><iframe width="560" height="315" src="https://www.youtube.com/embed/P2qKg2wCMws" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><span style="font:12px Times-Roman; color:#0000E9;"><u><br /></u></span><span style="font:12px Times-Roman; color:#0000E9;"><u><br /></u></span><span style="font:12px Times-Roman; color:#000000;">Slides: </span><a href="https://origin.csoandy.com/resources/DecisionMakingCoronavirus.pptx">PPTX</a>]]></content:encoded></item><item><title>20 Years In: Security&#x2019;s Grand Challenges&#x2c; Then and Now</title><dc:subject>Talks</dc:subject><dc:date>2020-02-28T10:54:06-05:00</dc:date><link>https://origin.csoandy.com/talks/files/2020-rsac.html#unique-entry-id-10</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/2020-rsac.html#unique-entry-id-10</guid><content:encoded><![CDATA[RSA Conference USA 2020<br /><br /><iframe width="560" height="315" src="https://www.youtube.com/embed/XgmTm5e38Y0" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br /><br /><a href="https://www.youtube.com/watch?v=XgmTm5e38Y0">https://www.youtube.com/watch?v=XgmTm5e38Y0</a>]]></content:encoded></item><item><title>Humans are Awesome/Terrible at Risk Management</title><dc:subject>Talks</dc:subject><dc:date>2019-09-18T10:44:35-04:00</dc:date><link>https://origin.csoandy.com/talks/files/BoS-2019.html#unique-entry-id-0</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/BoS-2019.html#unique-entry-id-0</guid><content:encoded><![CDATA[<span style="font:11px Menlo-Regular; color:#000000;"><a href="https://businessofsoftware.org/2019/10/slides-sketchnotes-interviews-photos-from-business-of-software-conference-usa-2019/">Business Of Software</a></span><span style="font:11px Menlo-Regular; color:#000000;"> Conference, Boston, 2019<br /><iframe allowtransparency="true" title="Wistia video player" allowFullscreen frameborder="0" scrolling="no" class="wistia_embed" name="wistia_embed" src="https://fast.wistia.net/embed/iframe/ra3xbn231w" width="400" height="225"></iframe><br /><br /></span><span style="font:11px Menlo-Bold; font-weight:bold; color:#000000;font-weight:bold; ">Slides</span><span style="font:11px Menlo-Regular; color:#000000;">: </span><span style="font:11px Menlo-Regular; color:#000000;"><a href="https://www.csoandy.com/downloads/files/Humans-Awesome_2019_august.pptx">PPTX</a></span><span style="font:11px Menlo-Regular; color:#000000;"><br /></span><a href="https://origin.csoandy.com/resources/Screen-Shot-2019-12-04-at-10.49.45-AM.png" target="_blank"><img class="imageStyle" alt="Screen Shot 2019-12-04 at 10.49.45 AM" src="https:/origin.csoandy.com/talks/files/screen-shot-2019-12-04-at-10.49.45-am.png" width="386" height="225" /></a>]]></content:encoded></item><item><title>Heroes&#x2c; Villains&#x2c; and Security Professionals</title><dc:subject>Talks</dc:subject><dc:date>2019-05-22T09:45:23-04:00</dc:date><link>https://origin.csoandy.com/talks/files/42f0cd37214a02aaa75c7e36a32a8283-1.html#unique-entry-id-1</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/42f0cd37214a02aaa75c7e36a32a8283-1.html#unique-entry-id-1</guid><content:encoded><![CDATA[<a href="https://rvasec.com/">RVASec</a><br />Talk not archived.<br /><br />Slides: <a href="https://www.csoandy.com/downloads/files/RVASEC-heroes-villains-infosec.pptx">https://www.csoandy.com/downloads/files/RVASEC-heroes-villains-infosec.pptx</a>]]></content:encoded></item><item><title>Humans are ...</title><dc:subject>Talks</dc:subject><dc:date>2019-03-05T01:00:33-05:00</dc:date><link>https://origin.csoandy.com/talks/files/14940dd3a856e7ba47dcfd84d1dba8ec-2.html#unique-entry-id-2</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/14940dd3a856e7ba47dcfd84d1dba8ec-2.html#unique-entry-id-2</guid><content:encoded><![CDATA[RSAC 2019<br /><br /><iframe width="400" height="225" src="https://www.youtube.com/embed/rwyX3jEj-8I" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br /><br />Slides: <a href="https://www.csoandy.com/downloads/files/RSAC_2019_Humans.pdf">PDF</a>]]></content:encoded></item><item><title>Incident Response at Planetary Scale</title><dc:subject>Talks</dc:subject><dc:date>2019-01-21T19:22:59-05:00</dc:date><link>https://origin.csoandy.com/talks/files/be2944ac08dc26528e262f26e6dc2f15-15.html#unique-entry-id-15</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/be2944ac08dc26528e262f26e6dc2f15-15.html#unique-entry-id-15</guid><content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube.com/embed/zm_JSg6niDs" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br /><br />Presented at osquery@scale]]></content:encoded></item><item><title>The Villain&#x27;s Quest</title><dc:subject>Talks</dc:subject><dc:date>2019-01-17T09:45:29-05:00</dc:date><link>https://origin.csoandy.com/talks/files/2019-01-villains.html#unique-entry-id-11</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/2019-01-villains.html#unique-entry-id-11</guid><content:encoded><![CDATA[An alternate look at the Harry Potter universe.<br />A PechaKucha talk: 6:40 seconds, 20 slides that auto-advance every 20 seconds.<br /><iframe width="560" height="315" src="https://www.youtube.com/embed/7gNlbdQw4xo" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br />]]></content:encoded></item><item><title>The Impending Complexity Apocalypse (13 minutes)</title><dc:subject>Talks</dc:subject><dc:date>2018-05-25T19:50:28-04:00</dc:date><link>https://origin.csoandy.com/talks/files/13c39be0deb7c503d6acfe57d62c611d-16.html#unique-entry-id-16</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/13c39be0deb7c503d6acfe57d62c611d-16.html#unique-entry-id-16</guid><content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube.com/embed/ywv6W-jKbgI" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br /><br />presented at the HBS Digital Initiative]]></content:encoded></item><item><title>Ditching Your Firewall</title><dc:subject>Talks</dc:subject><dc:date>2018-04-20T01:31:32-04:00</dc:date><link>https://origin.csoandy.com/talks/files/52f4b882a02d68c647dd8b3dd19bd0ec-7.html#unique-entry-id-7</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/52f4b882a02d68c647dd8b3dd19bd0ec-7.html#unique-entry-id-7</guid><content:encoded><![CDATA[RSAC 2018 Keynote, with Josh Shaul<br /><iframe width="400" height="225" src="https://www.youtube.com/embed/qzI-N0p9hFk" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>]]></content:encoded></item><item><title>Cognitive Injection</title><dc:subject>Talks</dc:subject><dc:date>2015-04-05T01:33:58-04:00</dc:date><link>https://origin.csoandy.com/talks/files/d7d2078248d2c69333bb02b7f3b19b90-8.html#unique-entry-id-8</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/d7d2078248d2c69333bb02b7f3b19b90-8.html#unique-entry-id-8</guid><content:encoded><![CDATA[Source Boston, 2015<br /><iframe width="400" height="225" src="https://www.youtube.com/embed/qNNDj-c3ETk" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br />Slides: <a href="https://www.csoandy.com/downloads/files/CogInjection.pdf">PDF (approximate)</a>]]></content:encoded></item><item><title>Cognitive Injection: DerbyCon</title><dc:subject>Talks</dc:subject><dc:date>2013-07-08T12:52:49-04:00</dc:date><link>https://origin.csoandy.com/talks/files/2013-Derbycon.html#unique-entry-id-18</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/2013-Derbycon.html#unique-entry-id-18</guid><content:encoded><![CDATA[DerbyCon 2013<br /><br /><iframe width="560" height="315" src="https://www.youtube.com/embed/ezgLKWzLZGI" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>]]></content:encoded></item><item><title>Herding Lizards</title><dc:subject>Talks</dc:subject><dc:date>2013-05-02T01:04:55-04:00</dc:date><link>https://origin.csoandy.com/talks/files/439ed5aff1a203cea241e98e51f36e3c-3.html#unique-entry-id-3</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/439ed5aff1a203cea241e98e51f36e3c-3.html#unique-entry-id-3</guid><content:encoded><![CDATA[SourceBoston 2013<br /><iframe width="400" height="225" src="https://www.youtube.com/embed/aMiPRCTLjVw" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br />]]></content:encoded></item><item><title>Managing Risk with Psychology</title><dc:subject>Talks</dc:subject><dc:date>2013-02-28T01:14:44-05:00</dc:date><link>https://origin.csoandy.com/talks/files/490f4193a8f7abdfc9a4f569d1952c6d-5.html#unique-entry-id-5</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/490f4193a8f7abdfc9a4f569d1952c6d-5.html#unique-entry-id-5</guid><content:encoded><![CDATA[RSAC Keynote 2013<br /><br /><iframe width="400" height="225" src="https://www.youtube.com/embed/Z5JJlH9R9BY" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>]]></content:encoded></item><item><title>Pastoreando Lagartos</title><dc:subject>Talks</dc:subject><dc:date>2012-10-05T01:10:21-04:00</dc:date><link>https://origin.csoandy.com/talks/files/fa0c5474fa6025817c1e2b54648a013b-4.html#unique-entry-id-4</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/fa0c5474fa6025817c1e2b54648a013b-4.html#unique-entry-id-4</guid><content:encoded><![CDATA[SecZone 2012<br /><br /><iframe width="400" height="225" src="https://www.youtube.com/embed/I4SKlalnDhk" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br /><br />Slides: <a href="https://www.csoandy.com/downloads/files/Lagartos.pdf">PDF</a>]]></content:encoded></item><item><title>Getting Ahead of the Security Poverty Line</title><dc:subject>Talks</dc:subject><dc:date>2012-06-11T01:19:16-04:00</dc:date><link>https://origin.csoandy.com/talks/files/844db84df319e28f6435b74ef87da9f1-6.html#unique-entry-id-6</link><guid isPermaLink="true">https://origin.csoandy.com/talks/files/844db84df319e28f6435b74ef87da9f1-6.html#unique-entry-id-6</guid><content:encoded><![CDATA[Hack In The Box, Amsterdam, 2012<br /><iframe width="400" height="225" src="https://www.youtube.com/embed/7OzpkUkIoFw" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe><br />]]></content:encoded></item></channel>
</rss>