Risk Isn't Static - Guardians of the Data - Veena Nagarajan - Episode #55
If someone tried to onboard a new vendor tomorrow, would your organization know exactly which questions to ask before granting access to sensitive data? For most teams, the answer is a scramble, not a process. In this episode, Ward sits down with Veena Nagarajan, interim CISO of a healthcare organization with 15 years in cybersecurity, to unpack why data protection has become as much about disciplined process as it is about technology. Veena walks through how she screens new solutions before they ever touch the environment, why a lean ten question risk assessment beats a bloated 100 question form nobody finishes, and how ongoing reassessment, not a one time checkbox, is what actually keeps organizations safe. She also opens up about her journey from India to becoming a healthcare CISO, and the mentors who shaped the way she leads.
Takeaways:
- Start every new solution with a short, focused risk questionnaire. Ten well chosen questions about hosting, data elements, and exposure will tell you more than fifty scattered ones ever could.
- Know your regulatory baseline before you assess risk. Whether it's HIPAA, PCI, or SOX, identifying which frameworks apply first helps you pinpoint your organization's true crown jewels.
- Risk assessment isn't a one time event. Reassess after a vendor moves from proof of concept to production, since environments and exposure change fast.
- Defense in depth still wins. Layer email security, EDR, DLP, and network detection together, because the human clicking a bad link remains the most common entry point.
- Don't let perfect automation be the enemy of consistency. A well maintained spreadsheet process beats a fancy automated one that nobody checks. What matters most is doing it regularly.
Quote of the Show:
"It doesn't matter if it's manual or automatic. What matters is keeping it regular and consistent. That is the key." - Veena Nagarajan
Links:
Ways to Tune In:
- Transistor: https://podcast.guardiansofthedata.show/
- Spotify: https://open.spotify.com/show/5gZXInkb12Qrs2Lyv0hstQ
- Apple Podcasts: https://podcasts.apple.com/us/podcast/guardians-of-the-data/id1826819323
- Amazon Music: https://music.amazon.com/podcasts/0754cdde-f1c4-4f6c-92a2-e263f7840eb8/guardians-of-the-data
- iHeart Radio: https://www.iheart.com/podcast/269-guardians-of-the-data-285972170/
- YouTube: https://www.youtube.com/@GuardiansoftheDataPod
Creators and Guests
