Bradley Schaufenbuel, CISO at Paychex

In this enlightening Sage Spotlight, we're joined by Bradley Schaufenbuel, Vice President and Chief Information Security Officer at Paychex. Bradley shares his invaluable experiences with Sagetap, emphasizing how the platform has significantly influenced both his professional journey and the cybersecurity posture of Paychex.

Key Takeaways

• Bradley's Role and Use of Sagetap: As the CISO of Paychex, Bradley leverages Sagetap to connect with groundbreaking cybersecurity solution providers, enhancing the organization's security infrastructure. Sagetap's platform allows him to give candid feedback and selectively pursue dialogues with vendors, avoiding the usual sales intrusions.
• Impact of Sagetap on Paychex: Sagetap has been instrumental in bringing Paychex into contact with novel cybersecurity solutions, facilitating a more fortified and efficient security framework within the company.
• Sagetap's Unique Value: Bradley appreciates Sagetap for its ability to streamline the process of discovering and connecting with tailored cybersecurity solutions, enhancing Paychex’s ability to protect against evolving threats without the common hassle of vendor bombardment.
• Advancements in Cybersecurity through Collaboration: The collaboration with solution providers like Prelude and Treblle exemplifies how Sagetap fosters meaningful partnerships that drive significant advancements in cybersecurity measures and strategies for enterprises like Paychex.

Full Transcript

 Bradley Schaufenbuel: I'm Vice President and Chief Information Security Officer at Paychex, the leading provider of payroll and HR software and services.

Sahil Khanna: Why exactly do you use Sagetap, and how has it impacted you personally, and how has it impacted your organization?

Bradley: Sure. Sagetap has connected me with several innovative solution providers that I might never have encountered on my own. And they delivered that through a platform that allows me to provide the solution providers with my unfiltered feedback and choose which solution providers I want to further engage with, without the hassle of being bombarded by sales folks on other platforms like LinkedIn.

So I'll talk about maybe the last two solution providers that I met through Sagetap that really resonated.

The first solution provider is a company called Prelude. And what Prelude does is help you validate the efficacy of your existing cybersecurity solutions.

So CISOs are spending millions of dollars a year on cybersecurity solutions. But if those solutions are misconfigured or they're not working properly or the coverage is not across all of your assets, they're pretty useless. And what Prelude does is install a lightweight probe on every endpoint or asset in your environment and uses that probe to test whether your security solutions stop the latest threats.

And what really excites me about Prelude is that unlike conventional breach and attack simulation solutions, which kind of test a small subset of assets, Prelude tests 100% of the assets in your environment, giving you full visibility into your control efficacy.

Sahil: Anyone else come to mind?

Bradley: Yeah, the second one that comes to mind is a company called Treblle. And Treblle provides you with full visibility into the operation of your APIs.

So as the adoption of APIs continues to increase exponentially, they're becoming essential to most organizations, including mine, and they're increasingly being targeted by bad actors.

And what Treblle does is identify how those APIs are being used, any vulnerabilities in those APIs, and any active threats against them.

And what excites me about Treblle is that unlike conventional API gateways and API security solutions, Treblle's embedded within your API source code via software development kit, which means that it has full visibility into the operation of those APIs with no blind spots.