
In the 3rd episode of The Abhisek Cast, I talk with Chris Rock—co-founder and CISO of SIEMonster, with more than 30 years of experience in cybersecurity. We explore why most companies still struggle with basic asset visibility, how to approach company mergers from a security perspective, and how a solid framework like ISO 27001 saves startups from painful mistakes. Chris also reflects on his experiences presenting at DEF CON, the importance of documenting security research thoroughly, and his personal hiring philosophy. A refreshing, no-BS conversation packed with lessons from the trenches.
Key points:
Most companies don’t know what assets they have, leading to major gaps
Auditing and pen testing are critical before merging orgs/domains
Startups need ISO, not just certifications for the sake of it
DEF CON is invaluable for learning and community
In hiring: honesty and initiative matter more than memorized answers