Skip to content
Artwork for The InfoSec Control Room
TechnologyArtsBooksBusinessCareersEntrepreneurshipManagementEducationCoursesHow ToSelf-ImprovementNewsBusiness NewsTech NewsScienceMathematics

The InfoSec Control Room

Taher Amine ELHOUARI

The InfoSec Control Room is a podcast by Taher Amine ELHOUARI about cybersecurity, governance, risk, compliance, resilience, and CISO-level decision-making.

This show goes beyond buzzwords, checklists, and surface-level security advice. Each episode explores the gap between what organizations believe they have in place and what actually works when incidents happen, audits begin, regulators ask questions, or leadership needs to make risk-based decisions.

Hosted from the perspective of a CISO/DSSI, cybersecurity governance practitioner, auditor, advisor, speaker, and community builder, The InfoSec Control Room covers practical topics across information security, GRC, CISO leadership, ISO standards, cyber resilience, privacy, incident response, CSIRT operations, security awareness, regulatory expectations, and lessons from the field.

The core idea is simple: most organizations do not have a security problem. They have a governance problem that manifests as security.

This podcast is for CISOs, security leaders, GRC professionals, auditors, consultants, executives, aspiring cybersecurity leaders, and practitioners who want clearer thinking, stronger controls, and governance that actually works.

No noise. No checkbox compliance. No fake maturity.

Just practical conversations on how security is governed, controlled, measured, and improved.

https://www.TaherAmine.org/

Play
  • 26 episodes
  • Avg 38 min
  • English
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • S1 · E1
    August 10 · 31 min

    EP001: Welcome to The InfoSec Control Room

    The official opening episode introducing the podcast, the host, the mission, and the governance-first view behind The InfoSec Control Room.

  • July 30 · 1 hr 6 min

    Media Archive: Building Cyber Resilience Beyond Compliance | Full Webinar | Taher Amine ELHOUARI - iExperts

    Compliance may demonstrate that security requirements have been addressed. Cyber resilience demonstrates that governance, people, processes, and technology can continue to operate under real pressure. This special webinar edition of The InfoSec Control Room presents the complete audio recording of my latest iExperts session: BUILDING CYBER RESILIENCE BEYOND COMPLIANCE. During this session, I examine why organizations can remain operationally fragile despite having policies, certifications, risk registers, control frameworks, and extensive compliance documentation. The webinar explores how organizations can move beyond checkbox compliance and connect leadership accountability, cybersecurity governance, enterprise risk management, GRC, SOC and CSIRT operations, incident response, crisis management, business continuity, recovery, and continuous improvement within one coherent cyber-resilience model. KEY TOPICS: • The real difference between cybersecurity compliance and cyber resilience • Why apparently compliant organizations may still fail during serious incidents • Moving from documented controls to operational capability • Executive accountability and cyber-risk ownership • Transforming standards and frameworks into practical operating models • Connecting GRC with SOC, CSIRT, and incident-response operations • Business continuity, crisis management, recovery, and lessons learned • Testing controls through simulations, exercises, and realistic scenarios • Common cyber-resilience failure patterns • Indicators and metrics that demonstrate genuine resilience • A practical operating model and improvement roadmap • Priority actions organizations can initiate during their first 30 days EPISODE TIMESTAMPS: 00:00 Webinar Opening and Host Introduction 01:45 About Taher Amine ELHOUARI 03:36 Why Cyber Resilience Matters 06:55 The Compliance Trap 12:13 Compliance Mindset vs Resilience Mindset 16:01 What Cyber Resilience Really Means 19:59 Governance and Executive Accountability 23:28 Risk Management and Framework Operationalization 30:17 Incident Response, SOC, CSIRT, and GRC 36:42 Continuity, Recovery, Crisis Management, and Testing 41:35 Failure Patterns and the Resilience Maturity Curve 48:47 Practical Resilience Operating Model and Roadmap 52:03 Priority Actions for the First 30 Days 55:35 Key Takeaways 58:10 Audience Questions and Answers 65:19 Closing Remarks ABOUT THE SPEAKER: Taher Amine ELHOUARI is a Global Cyber Leader, Senior Advisor, Accredited Auditor, Certified Trainer, and holds over 300 certifications. He serves as CISO and Head of Advisory & CSIRT at UNIDEES, with expertise spanning cybersecurity governance, GRC, risk management, auditing, advisory, security operations, incident response, SOC and CSIRT development, business continuity, operational resilience, and professional training. ORIGINAL WEBINAR: The session was originally hosted and publicly presented by iExperts on 29 July 2026. Watch the complete video: https://www.youtube.com/watch?v=qtqgWRv_qUI Learn more about the speaker: https://www.taheramine.org THE INFOSEC CONTROL ROOM The InfoSec Control Room explores cybersecurity governance, accountability, risk decisions, control effectiveness, resilience, leadership, and the operational realities behind information-security programs. My sincere appreciation goes to the entire iExperts team for hosting the webinar and to every professional who attended, contributed questions, and enriched the discussion.

Showing 1–20 of 26 episodes