The Paramify Podcast

#32 - Discussing FedRAMP with Michael Carter

Today, we’re honored to have Michael Carter on the show! Michael is the Managing Partner and Co-founder of Fortreum. Michael brings over two decades of expertise in cybersecurity and compliance, specializing in FedRAMP, FISMA, PCI, and more. He has held key leadership roles at Coalfire and Veris Group, shaping compliance strategies for top organizations across both government and commercial sectors. Michael’s deep insights into security and risk management make him a leading voice in the industry.
Learn more about Michael Carter: / carte2ms
Learn more about Fortreum: https://fortreum.com/
Learn more about Kenny Scott: / kenny-g-scott
Learn more about Paramify: https://www.paramify.com/

#31 - Discussing OSCAL and Cybersecurity with Alexander Stein

Today, we're honored to have Alexander Stein on the show. Alexander has a host of experience in Cybersecurity. He has worked as an IT Cybersecurity Specialist at the National Institute of Standards and Technology (NIST). With over two years at NIST focusing on Information Technology and Vulnerability Management, Alex has also held key roles at Flexion Inc. as a Security Practice Lead and Application Security Engineer,
and at BAM Technologies Learn more about Alexander Stein here: LinkedIn:   / alexanderjstein  
GitHub: github.com/aj-stein.
Learn more about NIST: https://www.nist.gov/
 
Learn more about Kenny Scott: LinkedIn:   / kenny-g-scott   Learn more about Paramify: Website: https://www.paramify.com/ LinkedIn:   / dashboard  

#30 - Discussing Government Affairs & Compliance with Michael Clauser

Today, we're honored to have Michael Clauser, on the show. Mike is the Founder & Managing Director of Ark where he helps tech and defense companies navigate government relations. He is a seasoned professional in government affairs, cybersecurity, and national security. Michael has led pivotal roles at Okta, Access Partnership, Analog Devices, and Fujitsu Limited, and served as a national security aide in the Pentagon. With a decade as an Intelligence Officer in the U.S. Navy, he has also held leadership roles supporting veterans and contributing to public policy. 
Learn more about Michael Clauser: LinkedIn: https://www.linkedin.com/in/michaelaclauser/
Learn more about Ark: https://ark.ga/
Learn more about Kenny Scott: LinkedIn: https://www.linkedin.com/in/kenny-g-scott/
Learn more about Paramify: Website: https://www.paramify.com/
LinkedIn: https://www.linkedin.com/company/80788473/admin/dashboard/

#29 - Discussing GRC Automation with Matt Hillary

Today we're honored to have Matt Hillary on the podcast. Matt is the Vice President of Security and Chief Information Security Officer at Drata. He is a seasoned cybersecurity leader with 15 years of experience and a passion for enabling innovation. 
Learn more about Matt Hillary:LinkedIn: https://www.linkedin.com/in/matthewhillary/Matt Hillary's Forbes Article: https://www.forbes.com/sites/forbestechcouncil/2024/06/20/privacy-by-design-and-its-impact-on-security-and-grc/
Learn More about Drata:Drata's Website: https://drata.com/Drata's LinkedIn: https://www.linkedin.com/company/drata/posts/?feedView=all
Learn more about Paramify: Paramify's Website: https://www.paramify.com/Paramify's LinkedIn: https://www.linkedin.com/company/80788473/admin/dashboard/
Matt Hillary brings over 15 years of experience in executive security leadership, risk management, and compliance. His impressive track record includes roles at Lumio, Weave HQ, Workfront, and Instructure. Matt holds a Master’s in Information Systems Management from Brigham Young University and is a CISA-certified professional. Known for his strong technical background, positive leadership style, and effective communication, Matt is dedicated to building tailored security solutions that drive measurable success.

#28 - Discussing Cloud Security and GRC with Eric Evans

Today we're honored to have Eric Evans on the show! Eric is the Founder and CTO of HanaByte, he is a cloud security and compliance expert. He has led security initiatives for startups to Fortune 10 companies and is a renowned public speaker on cloud security and compliance automation.
Learn more about Hanabyte:
https://www.hanabyte.com/ https://www.linkedin.com/company/hanabyte/posts/?feedView=all
Hanabyte's write-up on the OMB Memo:
https://www.hanabyte.com/a-look-at-the-modernizing-fedramp-memo/
Eric Evans's LinkedIn: https://www.linkedin.com/in/ericgonzalesevans/
Kenny Scott's LinkedIn: https://www.linkedin.com/in/kenny-g-scott/
Learn more about Paramify: https://www.paramify.com/

#27 - Discussing Cybersecurity and Compliance with Den Jones

Today, we're honored to be joined by Den Jones, Founder and CEO of 909Cyber and a veteran in cybersecurity. With a robust career that includes roles as Chief Security Officer at SonicWall, CSO at Banyan Security and Senior Director of Enterprise Security at Cisco, Den brings a wealth of experience to the table. He's a Stanford alumnus with a focus on Cyber Security and Executive Strategy, holds a Higher National Certificate in Computing from West Lothian College, and is a certified CISSP. Den also hosts 'Get IT Started. Get IT Done.', a podcast that discusses the cybersecurity industry. He’s here to share his expertise on the evolving cybersecurity landscape, tackling complex security challenges, and his approach to leadership in this crucial sector.
Learn more about Den Jones: https://www.linkedin.com/in/denwjones/
Get IT Started. Get IT Done. Podcast: https://podcasters.spotify.com/pod/show/banyan-security
Learn more about Paramify here: https://www.paramify.com/
Learn more about Kenny Scott: https://www.linkedin.com/in/kenny-g-scott/

#26 - Exploring OSCAL and GRC with Rob Sherwood

Today, we’re honored to have Rob Sherwood on the podcast. Rob is a seasoned cybersecurity professional with extensive experience in policy management, PKI architecture, and identity management. With over two decades in the field, Rob has left a lasting impact through his dedication to standards development, including his significant contributions to the Open Security Controls Assessment Language (OSCAL). From his role as a Principal Consultant at Credentive Security to his pivotal involvement in projects like the oscal-pki-policy-converter tool, Rob's passion for advancing cybersecurity practices is evident. As an advocate for collaboration and knowledge-sharing, his insights into OSCAL offer invaluable perspectives for professionals and organizations navigating the complexities of cybersecurity policy management.
Learn more about Rob: https://www.linkedin.com/in/rob-sherwood-credentive/
Credentive Security: https://www.credentive.com/
Paramify: https://www.paramify.com/

#25 - Exploring GRC & FedRAMP with Matthew Graham

Today we had the honor to talk with Matthew Graham, the Director of US Federal Practice at Prescient Security. Matthew is a seasoned cybersecurity expert whose extensive career has spanned technical and strategic leadership roles. With a rich background that includes high-level certifications such as CISSP, CASP+, and CCNA, Matthew brings a wealth of knowledge on FedRAMP & cybersecurity practices and trends.
In this episode, we talk about everything from FedRAMP Rev 5 to Hurricane Katrina and police interrogations.
Learn more about Matthew Graham: https://www.linkedin.com/in/msgcyberassessments/
Learn more about Prescient Security: prescientsecurity.com
Learn more about Paramify: https://www.paramify.com/

#24 - Discussing GRC & OSCAL with Brandt Keller

Today we had honor to talk with Brandt Keller, a distinguished software engineer and open source developer advocate with a comprehensive background that spans significant achievements in both the military and technology sectors. A veteran of the U.S. Marine Corps, Brandt has transitioned his disciplined and strategic approach from the field of communications within the military to the forefront of software engineering and cybersecurity. His recent endeavors have led him to explore the intricacies of Governance, Risk Management, and Compliance (GRC), focusing on the adoption of the Open Security Controls Assessment Language (OSCAL) by NIST to promote data freedom and enhance the automation of compliance processes. Brandt's commitment to leveraging his expertise for the advancement of technology and compliance standards showcases his dedication to innovation and continuous improvement. We're truly excited to have Brandt on the show to delve into his rich experience, explore his contributions to the field of technology, and discuss his visionary work in making compliance data more accessible and actionable.
Brandt Keller's open source project: https://github.com/defenseunicorns/lula
Brant Keller's LinkedIn: https://www.linkedin.com/in/brandtkeller/
Paramify: https://www.paramify.com/
 

#23 - Discussing Data Privacy with Tommy Hoschouer

Today we're honored to host Tommy Hoschouer, who currently leads the global public sector efforts at DeleteMe. Tommy's rich history at companies like Sprinklr, Medallia, SAP, and Qualtrics has equipped him with a unique perspective on using technology to enhance public sector operations, leading to significant improvements in revenue and efficiency. Now at DeleteMe, he is dedicated to defending personal and professional information from increasingly sophisticated digital threats, such as identity theft and cyber attacks. His focus on strengthening data privacy and security is crucial in our digital era. We look forward to unpacking his valuable insights on how to protect digital identities and adapt to the evolving technological landscape in the public sector.
In today's episode Kenny, Keaton, and Tommy talk about everything from data privacy, the importance of protecting your data, to our favorite ice cream shakes.
Learn more about Tommy: https://www.linkedin.com/in/tommy-h-18484087/
Learn more about DeleteMe: https://joindeleteme.com/
Learn more about Paramify: https://www.paramify.com/