For most teams, the answer is a scramble, not a process. In this episode, Ward sits down with Veena Nagarajan, interim CISO of a healthcare organization with 15 years in cybersecurity, to unpack why data protection has become as much about disciplined process as it is about technology. Veena walks through how she screens new solutions before they ever touch the environment, why a lean ten question risk assessment beats a bloated 100 question form nobody finishes, and how ongoing reassessment, not a one time checkbox, is what actually keeps organizations safe. She also opens up about her journey from India to becoming a healthcare CISO, and the mentors who shaped the way she leads.
Takeaways:
Start every new solution with a short, focused risk questionnaire. Ten well chosen questions about hosting, data elements, and exposure will tell you more than fifty scattered ones ever could.
Know your regulatory baseline before you assess risk. Whether it’s HIPAA, PCI, or SOX, identifying which frameworks apply first helps you pinpoint your organization’s true crown jewels.
Risk assessment isn’t a one time event. Reassess after a vendor moves from proof of concept to production, since environments and exposure change fast.
Defense in depth still wins. Layer email security, EDR, DLP, and network detection together, because the human clicking a bad link remains the most common entry point.
Don’t let perfect automation be the enemy of consistency. A well maintained spreadsheet process beats a fancy automated one that nobody checks. What matters most is doing it regularly.
"It doesn't matter if it's manual or automatic. What matters is keeping it regular and consistent. That is the key." - Veena Nagarajan
Connect with Veena:
Ways to Tune In:
Transistor: https://podcast.guardiansofthedata.show/
Spotify: https://open.spotify.com/show/5gZXInkb12Qrs2Lyv0hstQ
Apple Podcasts: https://podcasts.apple.com/us/podcast/guardians-of-the-data/id1826819323
Amazon Music: https://music.amazon.com/podcasts/0754cdde-f1c4-4f6c-92a2-e263f7840eb8/guardians-of-the-data
iHeart Radio: https://www.iheart.com/podcast/269-guardians-of-the-data-285972170/