I’d like to say that recently I have started podcasting, but that’s not exactly true.

I started an online video blog, in 2019, short vignettes (is that repetitive?) discussing information security issues for small and midsized businesses. The motive was purely entrepreneurial; I was less than two years into my experience as owner and principal of vCISO Services, LLC, and I was learning marketing skills.

I tried many approaches to marketing; some stuck, some didn’t. One example of the latter was cold-calling. After a few tries, I realized that I was not made for that.

Neither was excessive social media interaction. In the writing world, one’s platform is considered important for landing that elusive publishing deal, so often people will intentionally follow thousands with the expectation they will follow back. That’s a great way to create an echo chamber, but the effectiveness to return ratio, to me, seems very low.

Yet video I enjoyed. Each video vignette has several views, some measured in the dozens, some on the (low) hundreds. I have zero metrics to show how effective they are in marketing, though I have had people approach me at conferences stating they enjoyed my product, so maybe it helped with word of mouth. I continued until losing steam during the COVID pandemic.

At the beginning of this year, I found myself reviewing some of the videos, and realizing that I had lost the urge to create them from a marketing standpoint, but I enjoyed sharing knowledge for small and midsized businesses. With the opportunity for Spotify to host, as I had a decent library of content, I decided to start the series up again with a short clip and a new mission: no frills, no glamour, no transparent whiteboard text, no complex graphics, and no script – just a few minutes every Tuesday discussing SMB information security risk issues. And no focus on marketing.

I also realized that limiting the videos to just me was, well, limiting. I have the privilege and honor to know hundreds in the information security and risk management fields, each who has knowledge and experience different and often beyond my own. I needed to add guests, and let them do the talking.

The first episode with a guest dropped March 1. The experience proved to be more informative and fun than I had anticipated, and I therefore contacted several more colleagues to join me. Most enthusiastically agreed, to the point in short order I found the weekly podcast booked through the end of May.

I’m excited about this new arena. Podcasting is another form of publishing, just a different media. Just as indie should strive for professionalism in their works, so I am pushing myself to bring professionalism to each 15-25 minute episode while expanding and enhancing my skill set. Check out the Virtual CISO Moment and let me know how I’m doing!