Episodes 57
Avg. Duration 32m
Activity Highly Active
Apple Rating 4.7 (3)
Since Jan 2021
Latest Episode May 2026

Outreach Signals

Features Guests

Publishing Details

Schedule
Every 2 Months
Format
Episodic
Consistency
92%
Hosting
rss.buzzsprout.com

About This Podcast

The monthly podcast for security professionals, by security professionals.Two self proclaimed grumpy security professionals talk security risk, how they’ve managed it in the past and forward looking discussions with guests working in information security and risk management.

Podcasting 2.0 Features

transcript

Explore Statistics

Recent Episodes

S6E3 Risk Management - Enabling the pursuit of excellence with Joe Olivarez

May 07, 2026 32m Transcript

Visiting the Jacobs Engineering website you'll undoubtedly encounter the phrase "challenging today",  an acknowledgement that the world is much more complex than ever before.  While "it ain't like it…

S6E2 Risk conversations; Awkward, Unpopular and Essential - with Joshua Copeland

Mar 12, 2026 34m

Joshua Copeland's cyber security moniker is "The Unpopular Opinion Guy",  while most of us in security roles have been that person with an unpopular opinion at least a time or two, Copeland turned it…

S6E1 Cyber Security, the legal perspective with Brent Arnold

Jan 22, 2026 33m

"Legal and Regulatory" is a common receptor category  in most enterprise risk matrices but with any luck most organizations have limited direct experience with cyber litigation matters.  This episode…

S5E10 Cyber Resilience, a National Solution with Herbert Fensury

Dec 04, 2025 30m

Cyber crime is now a daily fact of life and a significant concern in both the private and public sectors but our response capabilities do not seem to be keeping up.  This episode dives deep into one…

S5E9 Integrated Assurance with Patrick Hayes

Oct 23, 2025 34m

20 years after their paths first crossed, three Canadian security professionals regroup to discuss a new risk management strategy book based on hard won field experience.  Patrick Hayes was a…

S5E8 The Summer Show - 2025, (pt 2)

Sep 11, 2025 27m Transcript

Part 2 of this summer break episode takes a bit of a light hearted look at the cyber security industry predictions that become the norm in late December and early January.  Eight or nine months…

S5E7 The Summer Show - 2025, (pt 1)

Aug 28, 2025 26m

The summer show started with the light hearted goal of evaluating the top security predictions that fill the internet in late December each year.  Forever unscripted, Tim and Doug wind up reflecting…

S5E6 ESRM roots, revelations & resilience with John Petruzzi

Jul 31, 2025 35m

Enterprise Security Risk Management (ESRM) principles appear in almost every episode and this one is a bit more overt because it features two of the three people responsible for promoting ESRM in the…

S5E5 Global Risk Management as Strategic Advantage with Dominic Bowen

Jun 19, 2025 35m

The Caffeinated Risk hosts navigate time zones and catch up with Dominic Bowen traveling between meetings to discuss risk management with an international expert on the subject. Mr. Bowen is a…

S5E4 Simplifying risk analysis using FAIR and Wiley Coyote with Jack Freund

Apr 24, 2025 8m Bonus

A while back we were fortunate enough to spend time with Jack Freund, coauthor and thought leader responsible for bring the FAIR methodology and practice into the main stream. A bonus from that…

S5E3 SMB Resilience and lessons for larger organizations with Rochelle Clarke

Mar 27, 2025 30m

At 45-50%, depending on your statistical source, there is no denying that small to medium sized businesses are a significant economic engine from both an employment and innovation perspective.  In…

S5E2 Addressing Risk and Cyber Resilience, the Alberta Approach - with Rachel Hayward

Feb 20, 2025 36m

A surprising number of digital innovations began in Alberta, be it the world's first public digital cellular network in 1985, the DNP3 industrial controls protocol and  becoming the first Google…

S5E1 Security Risk Management in an Open Data Environment with Michael Spaling

Jan 09, 2025 36m

Ever wondered how top universities protect their cutting-edge research from prying eyes while ensuring seamless access for their scholars? Join us as Michael Spaling, Principal Security Architect at…

S4E9 Engineering, Risk Management for Cyber-Physical Systems with Andrew Ginter

Nov 30, 2024 29m

The practice of engineering dates back thousands of years, incorporating science and mathematics to solve problems in the ancient world, and remains a key requirement for developing the complex…

S4E8 Deviance Normalization & Risk Management with Marco Ayala

Oct 24, 2024 34m

Technological change is inevitable and often one of the aspects that attracts people toward careers in information and operational technology. Although risk management is a part of navigating…

S4E7 Managing Supply Chain Risk Management - with Darren Gallop

Sep 26, 2024 32m

Whether it's the NIST CSF, 8276 or the new European Cyber Resilience Act there is no denying the expectation that supply chain management (SCM) is a risk management area no organization can ignore. …

S4E6 Metawar and Fostering Resilience with Winn Schwartau

Aug 29, 2024 34m

Long before the Matrix captured peoples imaginations, Winn Schwartau was steadily offering red pills for those reading his many books on information warfare.  A scholastic level researcher without…

S4E5 Resilience and I.R. Lessons Learned (the hard way) - with Adam McMath

Jul 11, 2024 34m

Almost all incident response plans include a "lessons learned" step, and in the post adrenalin phase that follows many breaches,  reviewing what worked and what needs improving doesn't excite a lot…

S4E4 ESRM a Transformation Catalyst with Radek Havlis

May 30, 2024 29m

Amongst the industry verticals classified as critical infrastructure, few would argue that telecommunications belongs in the top that list, placing even more weight on a risk management program due…

S4E3 Contingency Planning, Cyber Resilience and Incident Response

Mar 28, 2024 28m

Regulatory frameworks from PCI-DSS to NERC-CIP  to  the newly minted NIST CSF 2.0 each require organizations of all sizes to have cyber incident response plans.  Most of us who have spent any time in…

Frequently Asked Questions

How many episodes does Caffeinated Risk have?

Caffeinated Risk has published 57 episodes since January 2021, covering topics in Business, Management.

Is Caffeinated Risk still active?

Caffeinated Risk is currently highly active with new episodes every 2 months. Average episode length is 32m.

Similar Podcasts