AI is moving faster than governance, and that gap is where risk starts to grow teeth.

Wil Klu hosts Patrick Sullivan, VP of Strategy and Innovation at Align, for a sharp conversation on AI governance, shadow AI, business risk, and responsible adoption. This episode is for executives, CISOs, CIOs, GRC leaders, and business owners who know AI can create value but do not want to create chaos in the process. You’ll hear how to think about AI use cases, risk appetite, policy, training, and why business language matters if you want leadership to actually make good decisions.

Key takeaways:
• Why “we banned AI” is not the same thing as governance
• How shadow AI shows up inside real organizations
• What a legitimate business case for AI should look like
• Why AI risk has to be framed in business terms, not just technical ones
• How training and role-based guidance reduce ignorance and misuse
• Why fast AI adoption without guardrails creates long-tail risk

Follow The Keyboard Samurai for more episodes on cyber risk, executive communication, and the business realities behind modern technology. Leave a review and share this episode with the leader who thinks policy alone will keep AI in its lane.

Find Patrick: https://www.linkedin.com/in/the-patrick-sullivan/

AI in cybersecurity is full of noise. This episode helps you separate hype from risk.

Host Wil Klu sits down with Walter Haydock, founder of StackAware, to talk about AI governance, ChatGPT security, vendor risk, and what companies should actually do when AI adoption moves faster than security. If you lead cyber, IT, compliance, privacy, or product, this episode gives you a practical way to think about AI security without getting lost in buzzwords. They also unpack ISO 42001, data retention, model training, and why “self-hosted AI” is not automatically the safer option.

Key takeaways:
• Break down the biggest myths around AI cybersecurity and SaaS risk
• Understand how data retention and model training affect AI security
• Learn the first 3 steps to build AI governance inside an organization
• Evaluate third-party AI vendor risk when visibility is limited
• See why ISO 42001 is becoming important for AI compliance and readiness
• Hear how new laws may shape AI governance requirements

Follow the show for more episodes on cybersecurity, AI governance, GTM, and the business of tech. If this episode helped you, leave a review and share it with a leader who needs a clearer view of AI risk.

find Walter https://www.linkedin.com/in/walter-haydock/

Cybersecurity marketing fails when founders talk features and buyers need business outcomes.

In this episode, host Wil Klu talks with Jordan Snapper, aka Dr. Cyber, about what actually works in cybersecurity GTM. Jordan helps cyber founders with positioning, content, and growth, and this conversation gets into the real problems behind weak messaging, bad targeting, and wasted budget. If you are a founder, cyber marketer, SDR, AE, or security leader trying to grow a cybersecurity company, this is a sharp look at founder-led growth, LinkedIn strategy, buyer trust, and how to turn content into real pipeline.

You’ll hear about:
• Why cyber startups should not lean on Gartner too early
• How to position a security product around outcomes, not features
• Why LinkedIn founder-led growth beats relying only on company pages
• How Reddit, comments, and AMAs can drive trust and content ideas
• Why MQLs fall short and sales-ready conversations matter more
• How marketing can better support sales with stronger content and enablement

Follow Keyboard Samurai for more episodes on the business of cyber, tech, GTM, and executive decision-making. Leave a review and share this episode with a founder or marketer building in cybersecurity.

Find Jordan:

https://www.linkedin.com/in/jordansnapper/

Cybersecurity startup GTM is not about running more demos. It’s about understanding trust, attention, and channel economics.

In this episode, host Wil Klu talks with Konnor Andersen, a cybersecurity GTM leader who has helped startups scale sales and marketing teams. They unpack why CISOs can’t take endless vendor meetings, how risk and credibility drive buying decisions, and why channel partners protect their long-term relationships above everything else. If you’re a founder, CRO, or GTM leader in cyber, this episode will sharpen how you think about growth.

Key takeaways:

• Why “just 20 minutes” is a broken approach in cybersecurity sales

• How trust drives the CISO buying process

• What channel partners expect before they engage

• The real economics behind VAR relationships

• When federal vs commercial GTM becomes a strategic fork

Follow the show for weekly conversations on the business of cybersecurity and tech, and leave a review if this episode helped you think differently.

Find Konnor:

https://www.linkedin.com/in/konnorandersen/

https://cyberbuildingblocks.substack.com/

Cybersecurity doesn’t win by caring more. It wins by making decisions easier.

Host Wil Klu sits down with Drew Simonis (nearly 30 years in cybersecurity, 20 years as a CISO/deputy CISO) to talk about why cyber leaders lose executive trust, how to translate cyber risk into business context, and why “perfect security” often breaks the business. This is for CISOs, security leaders, and business leaders who want clearer conversations, faster alignment, and less security theater.

Key takeaways:• Business context beats “business terms” for exec buy-in• If your message flops, blaming the audience is the failure• “Perfect vs good enough” is a leadership decision, not a slogan• SOC 2 often reduces sales friction and builds trust at scale• Relationships grow when security leads with a servant mindset
Follow the show, share this episode with a leader who needs it, and leave a review if it helped you think differently.

Follow the show

https://www.youtube.com/@KeybdSamurai

https://www.linkedin.com/in/wilklu/

Find Drew on LI: https://www.linkedin.com/in/drew-simonis/

Security awareness training should change behavior, not just generate metrics.

Wil Klu talks with Robert Siciliano (30+ years in security awareness training) about human-centric cybersecurity and why most employee training fails to create real security culture. They unpack trust psychology, fear and denial, and why phishing simulation training can’t carry the whole program. If your people “do the training” but still don’t care, this is a blueprint for making security personal and practical.

Key takeaways:

• Why “lecture-style” security awareness gets tuned out

• How trust-by-default makes people vulnerable to scams

• The missing layer: digital literacy (passwords, MFA, password managers)

• How live, dialogue-based training drives behavior change

• Moving from awareness to security appreciation

Follow the show, share this episode with your CISO or HR lead, and leave a review if it helped.

More resources at www.wilklu.me

Find Robert www.protectnowllc.com

If your AI security plan starts and ends with “LLM,” you’re already behind.

Wil talks with cybersecurity architect Roman Kruglov explains why “AI” is not one risk bucket and how security changes across LLMs, SLMs, RAG, and data-specific models. We talk on-prem vs cloud, API security basics that still get missed, and the bigger problem most teams ignore: data labeling, DLP, and permissions hygiene. You’ll also hear why Copilot can surface what SharePoint search never would, and why identity (including non-human identities) is the next battlefield.

Key takeaways:

• How to compare LLM vs RAG security risks

• Why data labeling + DLP matter before you deploy AI

• Copilot, SharePoint/Teams sprawl, and “public is public”

• Governance templates and guardrails that don’t block delivery

• Why identity is becoming the new perimeter

Follow the show, leave a quick rating, and share this episode with the person pushing “AI” in your org.

Fast SaaS growth exposes problems most teams don’t see until it’s too late.

In this episode of The Keyboard Samurai Podcast, I break down what happens when revenue, customers, and expectations scale faster than the systems meant to support them, with Steve Doty and Chris Goodman of Defensible Technology as the conversation drivers.

We talk about how compliance milestones like SOC 2 create a false sense of security, why operational maturity lags behind growth, and how security and process debt quietly become growth blockers.

This episode covers:

• Why SOC 2 is a starting point, not a finish line

• How SaaS growth reveals gaps in security and operations

• The difference between being compliant and being resilient

• Why teams underestimate the cost of security and process debt

• How misaligned systems slow deals, erode trust, and increase risk

• What founders and operators should fix before growth forces the issue

If you’re building or scaling a SaaS company, this episode reframes security, compliance, and operations as growth infrastructure—not checkboxes.

This isn’t about fear.
It’s about staying ahead of your own success.

Find Chris & Steve:

https://www.linkedin.com/in/stevedoty/

https://www.linkedin.com/in/christopher-goodman-007/

Most organizations say they want to modernize their cybersecurity stack.

What they usually mean is buying more tools.

In this episode of The Keyboard Samurai Podcast, I break down what modernizing security actually looks like with Ben Wilcox—and why most “modern” security programs are still built on fragmented data, disconnected tools, and the wrong definition of risk.

We talk about why modernization isn’t a technical exercise, how operational risk should drive security decisions, and why identity has quietly become the biggest risk surface in most environments.

This conversation covers:

• Why the board cares about operational risk, not tools

• How disconnected security platforms create blind spots

• Why SOC, GRC, and user awareness can’t operate in silos

• Identity as the dominant risk driver in modern environments

• Why automation and AI fail without clean data and defined process

• The coming identity problem created by AI agents

If you’re responsible for security strategy, modernization, or explaining cyber risk to the business, this episode reframes how to think about tools, data, and outcomes.

This isn’t about buying more technology.
It’s about building a system that actually works.

Find Ben:https://www.linkedin.com/in/ben-wilcox/

#podcast #cybersecurity #cyber #tech #MSS #MSP #startup

Most cybersecurity leaders lose the boardroom before the conversation even starts.

In this episode of The Keyboard Samurai Podcast, I sit down with Jeffery Wheatman to break down why board-level cybersecurity conversations fail, and what executives actually care about when risk is on the table.

Jeffery pulls back the curtain on how boards think, why security teams struggle to get traction, and how translating cyber risk into business impact is the difference between influence and irrelevance.

We cover:

• What boards really care about (and what they don’t)

• Why acronyms, jargon, and technical detail kill credibility

• The difference between owning risk and advising on risk

• Why checkbox compliance creates a false sense of security

• How to frame cyber issues in terms of money, operations, and accountability

• What CISOs get wrong when communicating with executives

If you’re a CISO, security leader, or executive trying to get buy-in at the board level, this episode is a masterclass in speaking the language of decision-makers.

This isn’t about better slides.
It’s about better conversations.