{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Cyber Smokehouse","title":"Vulnerability Velocity - Jim Covington - Cyber Smokehouse - Episode #34","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/ee87bc5d\"></iframe>","width":"100%","height":180,"duration":3011,"description":"Take your security program maturity, cyber risk quantification, and board reporting to the next level with practical insights on advancing beyond baseline frameworks, governing rapid AI adoption, and building continuous operational resilience. It’s time to move past chasing every \"shiny new toy\" and refocus your strategy on core hygiene, financial risk translation, and actionable metrics. Who better to guide you through this transition than Qualcomm Cybersecurity Program Strategy Lead, former digital health DPO, and Qualified Technology Executive (QTE), Jim Covington?\nYou will learn why aiming for a level 5 maturity across every NIST CSF domain isn't always the right business move, how to translate technical security gaps into financial loss metrics that boards care about, and why continuous system rollover is replacing legacy 30-day patch cycles. Get motivated to cut through reporting noise, implement AI governance with real teeth, and build security programs designed for ultimate business resilience!\nTakeaways:\n\nTargeted NIST CSF Maturity: Organizations don't need a 5.0 maturity rating across every domain; target high maturity for critical functions like Incident Response and balance other domains around business risk appetite.\nSpeaking the Board's Financial Language: Technical scores and 1-to-5 heatmaps no longer cut it; converting cyber risk into potential financial loss or gain is essential for securing executive buy-in.\nThe Perils of Chasing \"Shiny Toys\": Leaders often chase cloud, machine learning, or generative AI while neglecting basic cyber hygiene; mastering 80% to 90% of the CIS Top 10 remains the most effective defense.\nContinuous Rollovers vs. Patch Tickets: With zero-day exploit velocity shrinking, traditional ticketing to IT teams is failing; continuous 24- to 48-hour automated system updates represent the future of vulnerability management.\nAI Governance Requires Real Teeth: While organizations rush to deploy AI agents and tools, steering...","thumbnail_url":"https://img.transistorcdn.com/OzVByYrVZ7pJIeb4cJ2-aoOkjC_j5Q1oz9lj1NhJqsk/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS80OTlh/YTdiNmUxMDU5OWY1/NWM4NTAxODM1NGNm/YTBiZi5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}