Episode 12: One Year of Distilled Security, Auditor Quality, and Starting Your Own Company
Join us as we reflect on:
- One Year of Podcasting: The crew celebrates a full year of episodes, favorite topics, behind-the-scenes production, and where the show is headed next—including a new studio setup and future sponsors.
- Audit Quality and Risk: A deep dive into the evolution of cybersecurity audits, the growing influence of low-cost providers, and what actually makes an audit valuable and trustworthy.
- Third-Party Risk Management: How companies can assess vendor SOC 2 reports, triage risk among their vendors, and build defensible compliance practices.
- Operational vs. Commercial Risk: The importance of translating audit findings into business impact and strengthening vendor partnerships for long-term resilience.
- Bourbon Review – Jefferson’s Tropics: A tasting of a tropical-aged bourbon matured in Singapore’s climate, featuring notes of toffee and spice.
- BSides Pittsburgh Update: Details on ticket sales, sponsor opportunities, and how to get involved with the local security community’s flagship event.
- Entrepreneurship & Starting a Business: A thoughtful discussion on what it really takes to start your own business—when to consider it, how to prepare, and why it’s often more work (and growth) than expected.
Timestamps
00:00 – Intro & 1-Year Milestone
01:00 – Year in Review
02:40 – Behind the Scenes
04:45 – Favorite Moments
06:10 – Studio Upgrades
07:55 – Sponsors Chat
08:45 – Confetti Recap
10:00 – Auditor Quality
20:00 – GRC Realities
29:00 – SOC 2 Reports
38:30 – Vendor Risk
54:00 – Designing Resilience
57:45 – Audit Takeaways
1:02:00 – Bourbon Review
1:06:10 – BSides Update
1:09:00 – Starting a Business
1:36:00 – Wrap-Up & Cheers
Hosts
Connect with Us
- Website: Distilled Security Podcast
- Twitter: @DisSecPod
- Email: hello@distilledsecuritypodcast.com
