SOC 2 Compliance

The audit framework and certification process for service organizations to demonstrate security controls and data protection practices, increasingly required by enterprise customers and investors.

3 episodes

Parallel Entrepreneurism: Shipping Startups Side by Side | Kirby Winters, Ep 50

Parallel Entrepreneurism: Shipping Startups Side by Side | Kirby Winters, Ep 50

Kirby Winters discusses launching multiple ventures simultaneously using AI-powered development, including Cyber Savi (a compliance automation platform), a vodka brand, and Unshucked (an oyster tracking app). He explains how agentic AI enables building production-ready software in weeks instead of years, the shift from consulting to outcome-based services, and strategies for selling cybersecurity compliance tools through MSP channel partners.

Phishing, AI Scams, and the Ever-Intensifying Cybersecurity War | Antonio Pagano, Ep 23

Phishing, AI Scams, and the Ever-Intensifying Cybersecurity War | Antonio Pagano, Ep 23

Antonio Pagano, CTO and co-founder of Symbol Security and founder of Wano, discusses the evolution of cybersecurity threats—particularly AI-enhanced phishing attacks—and the human vulnerabilities that remain the weakest link in security. He shares insights from running two companies across continents, bootstrapping Symbol Security for six years, and building Wano's 45-person development team in Colombia while maintaining work-life balance and continuous learning.

Scout Skills, Leadership Hacks, and Smart Security in the Age of AI | Kirby Winters, Ep 17

Scout Skills, Leadership Hacks, and Smart Security in the Age of AI | Kirby Winters, Ep 17

Kirby Winters, fractional CISO at TechCXO, discusses his journey from telecom to cybersecurity consulting, emphasizing leadership lessons from Eagle Scouts and entrepreneurship. He covers the evolving threat landscape—from social engineering to AI-enhanced phishing—and explains how fractional security leadership helps SMBs navigate SOC 2, HIPAA, and CMMC compliance without full-time hires. The conversation explores VPN evolution, cyber insurance realities, and the critical need for proactive security planning before customer mandates or breaches force action.

Want to go deeper?

Work With Me
Back to all topics