Episode 181: Supply and Demand of Cybersecurity Ecosystems
In episode 181 of Cybersecurity Where You Are, Tony Sager sits down with Vilius Benetis, Director of NRD Cyber Security. Together, they discuss how Vilius applies his expertise as a CIS Critical Security Controls® (CIS Controls®) Ambassador to help to cultivate supply and demand for growing cybersecurity ecosystems around the world.
Here are some highlights from our episode:
- 01:11. Introductions to Vilius and recollections of how he met Tony for the first time
- 02:06. The CIS Controls as a reasonable, logical approach that avoids generic language
- 04:11. How the CIS Controls shaped Vilius' cybersecurity conversations with the World Bank
- 05:26. A clear connection between knowing what you have and recovering from an incident
- 07:55. A strategic look at how to build cybersecurity programs that will grow and evolve
- 12:18. How the CIS Controls help to clarify reasonable cybersecurity and avoid victim blaming
- 18:07. An encouraging sign: Governments enabling businesses, not competing with them
- 21:13. Transportation: A lens for understanding how security culture and expectations change
- 28:11. A brief look at how to make progress on operationalizing security
- 31:54. The supply and demand forces that help to create cybersecurity ecosystems
- 38:13. An opportunity for helping organizations to simplify governance
- 42:02. Parting thoughts and thanks
Resources
- CIS Critical Security Controls®
- CIS Controls Ambassador Spotlight: Vilius Benetis
- Episode 160: Championing SME Security with the CIS Controls
- Episode 168: Institutionalizing Good Cybersecurity Ideas
- Episode 172: Helping CISOs as a CIS Controls Ambassador
- Reasonable Cybersecurity
- Guide to Implementation Groups (IG): CIS Critical Security Controls v8.1
- The Cost of Cyber Defense: CIS Controls IG1
- CIS Community Defense Model 2.0
If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].
As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.