StarZero All shows Try the podcast clipper →

David D'Amato

Chief Information Security Officer, Citadel · 1 appearance on the record.

computed by AI from the episodes · how this works → · full disclaimer →

executiveoperator

David Damato is the Chief Information Security Officer at Citadel. He previously served as Chief Security Officer at Tanium and Gemini, following senior incident response roles at Mandiant and PwC.

11statements → 5claims → 2claims resolved → 4/5average certainty → 2.27/5average debate potential →

1 supported 1 partly supported 0 contradicted 3 not checkable as stated how the 5 claims stand · each chip opens the sources

5 assertions · 2 opinions · 3 insights · 1 disclosure · every statement was checked. The predictions and assertions are the 5 claims: statements the public record can support or contradict. 2 are resolved, and 3 name no date, number or outcome precise enough to check. Everything else (opinions, insights, what ifs, disclosures) can never be settled by the record, so it carries no assessment.

The record, in short

What the tape says about how David argues and how the claims held up. Everything they said, and everything said about them, is in the tabs below.

Their most notable supported claim

Assertion Supported
D'Amato: No standardized cybersecurity reporting framework exists for corporate boards
“There should be, and the challenge is right now there's no standardized way to report information to the board.”
David D'Amato Jan 2, 2019 ▶ 18:15 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room

Expressed certainty vs assessment result

none yet certainty 1
none yet certainty 2
none yet certainty 3
100% certainty 4
50% certainty 5

weighted support: a fully supported claim counts one, a partly supported claim counts half. Each filled bar is clickable and opens exactly those claims; "none yet" means nothing said at that certainty level has resolved yet

How they sound: not measured why? →

We measure speaking style by listening to the audio itself, and a fair number needs at least 2,000 words from one person on tape we have measured. There is too little of David D'Amato on measured tape to publish a rate. This says nothing about how they speak.

Everything David D'Amato said on the a16z Podcast that made the record, most notable first. Filter by type, assessment or year in the ledger →

Opinion
D'Amato: Corporate board focus on China and Russia is a distraction
“They're simply really interested in things that are in the news. So if you look at things like China and Russia that don't impact most organizations, they want to know who's attacking and where they're from, what they're doing. And to be honest with you, that'…”
David D'Amato Jan 2, 2019 ▶ 7:21 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Opinion
D'Amato: Cyber attack attribution does not matter for private corporations
“And for most organizations, the attribution doesn't matter. For the government, it absolutely matters. But as a corporation, what will you be able to do? You're not going to be able to hack back that, that country.”
David D'Amato Jan 2, 2019 ▶ 7:50 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Assertion Not checkable as stated
D'Amato: Cyber attackers often understand target networks better than defenders
“Most organizations don't really understand their own organization, their environment, and that in many cases, attackers understand the environment much better than the defenders do.”
David D'Amato Jan 2, 2019 ▶ 15:36 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Assertion Not checkable as stated
D'Amato: Chief Security Officers commonly do not know their endpoint count
“When I asked them how many systems they had in their organization, how many endpoints they had, computers and servers and things like that, They had no idea. So that's pretty common.”
David D'Amato Jan 2, 2019 ▶ 15:58 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Assertion Not checkable as stated
D'Amato: Penetration testers breached top secure facilities in under two hours
“I'll be honest with you, I was not very good, but within about a week or less, I think my best was about two hours, we were able to break into some of the most secure locations in the world. Physically and Based on information technology.”
David D'Amato Jan 2, 2019 ▶ 6:11 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Insight
D'Amato: Integrity attacks are most devastating because they go undetected
“And integrity tends to be one of the most devastating attacks, because you typically don't know what's happened.”
David D'Amato Jan 2, 2019 ▶ 12:34 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Assertion Partly supported
D'Amato: Google was the first company to publicly disclose Chinese cyberattacks
“If you walk through the timeline, you go back and start with Google in 2010, when they're the first company to come out and actually talk about Chinese state-sponsored actors. This is something the government and a lot of people knew about at the time. And it'…”
David D'Amato Jan 2, 2019 ▶ 13:11 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Insight
D'Amato: Most steps in a cyberattack reuse familiar tactics
“An attack isn't made up of one action. It's usually made up of multiple actions. And so what you may see is one different action in that attack, and probably multiple, maybe 10 or 12 of the steps that you've seen in previous attacks. So in most cases, you're l…”
David D'Amato Jan 2, 2019 ▶ 14:52 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Insight
D'Amato: Cyber attackers face no accountability, enabling endless retries
“As an attacker, I can keep trying my attack as many times as I want. So every time you catch me, I simply restart my attack because there is no accountability.”
David D'Amato Jan 2, 2019 ▶ 16:49 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Assertion Supported
D'Amato: No standardized cybersecurity reporting framework exists for corporate boards
“There should be, and the challenge is right now there's no standardized way to report information to the board.”
David D'Amato Jan 2, 2019 ▶ 18:15 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room
Disclosure
D'Amato: Non-state criminals stole $10 million from a bank overnight in 2010
“One of the first cases I ever worked on back in 2010 was a bank that lost about ten million dollars overnight. It's a gang of criminals who were loosely affiliated with each other, who had a reasonable set of skills from their computer science degrees, from th…”
David D'Amato Jan 2, 2019 ▶ 4:42 a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room

Appearances (1)

EpisodeDateSpeaking time
a16z Podcast | Cybersecurity in the Boardroom vs. the Situation Room Jan 2, 2019 5m
Made with StarZero

Turn any episode into a week of clips.

This entire site, over 1,000 episodes transcribed, diarized, checked and made playable, runs on the StarZero media pipeline. Drop in your own episode and the podcast clipper finds the moments worth sharing, cuts them, captions them, and reframes them for every feed.

Try the podcast clipper Learn more