Remember, Every Underappreciated Risk Is Just a Crisis Waiting to Be Discovered

About this episode

The episode discusses the importance of recognizing underappreciated risks and the role of vendors in security compliance.

All links and images can be found on CISO Series . This week's episode is hosted by me, David Spark , producer of CISO Series and Andy Ellis , principal of Duha. Joining us is Hilik Kotler , svp, CISO and IT, Expedia Group . In this episode: The numbers game What makes a vendor worth your time Humanity in the loop Alignment is a prerequisite, not a nice-to-have A huge thanks to our sponsor, Vanta Risk and regulation ramping up—and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Learn more at vanta.com/ciso .

People in this episode

Hosts: David Spark, Andy Ellis

Guest: Hilik Kotler

Topics covered

• risk management
• vendor evaluation
• compliance
• security
• automation

Keywords

• risk
• vendor
• compliance
• security
• automation
• GRC
• SOC 2

Sponsors

Vanta

Mentioned in this episode

Organizations: Expedia Group

More episodes of CISO Series Podcast

• Step 1: Deploy New AI Tool. Step 2: Discover Security Flaws. Step 3: Repeat. (LIVE in Orlando) · April 28, 2026 · 43 min
• Back in My Day, You Could Get a Cybersecurity Job at the Corner Store · April 21, 2026 · 40 min
• Our Theoretical Controls Work Great Against Hypothetical Attacks · April 14, 2026 · 43 min
• Do You Think These Compliance Boxes Check Themselves? (LIVE in Clearwater, FL) · March 31, 2026 · 44 min
• Why Highlight Diversity When We Can Just Hope You Don't Notice? · March 24, 2026 · 38 min
• They're Less "Best Practices" and More "Sounds Good on LinkedIn" · March 17, 2026 · 42 min