🔹 Live from CISO XC DFW (www.cisoxc.com) | Sponsored by Valence Security (www.valencesecurity.com)

In this field-recorded episode of The Professional CISO Show, host David Malicoat returns to CISO XC DFW for another round of dynamic, on-the-ground conversations with three influential cybersecurity leaders — each offering a unique and grounded perspective on today’s real-world risks and tomorrow’s security frontiers.

Cyber attorney and governance thought leader Shawn Tuma returns to discuss the resurgence of business email compromise (BEC), the importance of humility in cyber defense, and why AI governance is rapidly becoming a core CISO responsibility. Maritime security executive Glen Vickers walks us through the harsh realities of securing satellite-connected vessels, dealing with Starlink, and the challenges of maritime connectivity. Then, longtime friend of the show and security visionary Chris Cochran reveals his newest venture: Commandant, an AI-powered incident response co-pilot designed to fundamentally change how organizations respond to crisis events — complete with its own assistant, Lucy.

Throughout the episode, we also explore the challenges of securing SaaS ecosystems, managing identity at scale, and the rising importance of proactive vendor evaluation and tabletop readiness.

Whether you’re a field-hardened CISO or just starting your executive security journey, this episode brings you into the heart of cybersecurity’s most pressing conversations — unfiltered, insightful, and straight from the source.

🔑 What You’ll Learn in This Episode

• The dangerous re-emergence of BEC as a top threat vector — and why AI may be amplifying the risk
• Why CISOs must lead the charge on AI governance and strategy — or risk being sidelined
• How FIDO and identity modernization can reduce exposure to targeted fraud
• Insights on satellite cybersecurity, Starlink limitations, and maritime network vulnerabilities
• A behind-the-scenes preview of “Commandant,” an AI co-pilot for incident response — designed to help IR teams with note-taking, SLA tracking, notification workflows, and continuous tabletop exercises
• How vendor selection, tabletop simulations, and small supplier coordination can make or break your organization during a crisis
• Why humility, not hubris, is the most underrated leadership trait in cybersecurity

💬 Notable Quotes

“Just because you can’t think of how the attacker got in doesn’t mean they didn’t. That’s why we need more humility in this industry.” —Shawn Tuma

“AI isn’t just a buzzword. It’s a once-in-a-generation shift — and CISOs have a chance to shape it from the start.” —David Malicoat

“Lucy is designed to help you during your worst day — capturing context, notes, contracts, timelines, and guiding you through the fog of war.” —Chris Cochran

“We’re securing vessels in the middle of the ocean using tech that was old when we got it — Starlink’s changed the game, but it’s brought new challenges too.” —Glen Vickers

“A $5M cyber insurance policy might only cover $250K of social engineering fraud. The rest is on you.” —Shawn Tuma

🎧 Listen & Subscribe

📍 Available now on all major platforms:

🔗 Spotify

🔗 Apple Podcasts

🌐 Full episodes and show resources at www.thpc.co

📣 Stay Connected with The Professional CISO Show

📺 Watch on YouTube

💼 Follow on LinkedIn

🧠 Guest Info

• Shawn Tuma – Partner at Spencer Fane, co-author of GC + CISO Connection
• Glen Vickers – CISO at ABS Wavesight
• Chris Cochran – Co-founder, Commandant AI | Formerly of Netflix, NSA, Mandiant

📚 Related Episodes

• EP 71 – CISO Culture & AI Strategy
• EP 63 – AI Governance and the Role of the CISO
• EP 45 – Shawn Tuma on Legal Risk, AI, and Cyber Insurance

🔖 Hashtags

#CISO #CyberSecurity #TheProfessionalCISOShow #BusinessEmailCompromise #AIinSecurity #IncidentResponse #MaritimeCyber #StarlinkSecurity #ValenceSecurity #CommandantAI #LeadershipInCyber #FIDO #SupplyChainRisk #CyberInsurance #SaaSVisibility #RealWorldSecurity