In this episode of Mission: Cyber, host Emil Sayegh sits down with Michael Gruden, Partner at Steptoe and a leading cybersecurity and incident-response attorney. With a career spanning the Pentagon, DHS, and private practice, Michael brings a mission-focused perspective to the legal, regulatory, and operational challenges facing defense contractors today.

Michael breaks down the confusion surrounding the Department of Defense’s Phase 2 CMMC pause — clarifying what has actually changed, what hasn’t, and why the obligation to protect Controlled Unclassified Information (CUI) remains firmly in place. He also explains how DOJ enforcement, inaccurate attestations, and unprivileged assessments can expose contractors to significant legal risk amid increased scrutiny across the Defense Industrial Base.

Most importantly, Michael offers practical guidance for leaders on how to use this pause as a strategic opportunity, why governance and data-flow mapping matter more than ever, and how conducting assessments under legal privilege can help organizations identify and address
cybersecurity gaps with greater confidence.

In this episode:

• What the CMMC Phase 2 pause really means for contractors
• Why protecting CUI remains a critical legal and contractual obligation
• How internal assessments, SPRS scores, and attestations can become evidence
• DOJ enforcement trends impacting prime contractors and small businesses
• Why now is the time to strengthen governance, documentation, and data mapping
• How legal privilege can reduce exposure during cybersecurity assessments

Whether you’re a CEO, CIO, CISO, or compliance leader navigating the shifting CMMC landscape, this conversation delivers clarity, perspective, and actionable advice on what it takes to protect your mission — and your organization — in today’s evolving regulatory environment.

In this episode of Mission: Cyber, host Emil Sayegh sits down with Fernando Machado, Managing Principal and CISO of Cybersec Investments, to explore his journey from Army infantryman to one of the most experienced voices in the CMMC ecosystem.

Fernando shares how servant leadership, rooted in his military service, continues to shape his philosophy, his assessment teams, and the culture of Cybersec Investments.

He also breaks down the myths and misconceptions that often mislead defense contractors—from overreliance on SSPs to misunderstandings about SPRS scores—and offers a candid look at what separates confident teams from overwhelmed ones during an assessment.

In this episode:

• How servant leadership shapes effective cybersecurity teams
• The most common cybersecurity myths and the truths behind them
• Enforcement trends holding defense contractors accountable for their cybersecurity posture
• The mission‑driven reasons securing the Defense Industrial Base matters now
  more than ever

Whether you’re a defense contractor, security practitioner, or leader navigating compliance, this conversation offers clear guidance, real‑world perspective, and a grounded look at what it truly takes to secure the Defense Industrial Base.

In this episode of Mission: Cyber, host Emil Sayegh sits down with Scott Price, Founder and CEO of A-LIGN, to discuss his journey from auditor to entrepreneur and his role in building one of the world's leading compliance firms.

Scott shares lessons from his early career at Arthur Andersen, the impact of the Enron collapse on his leadership philosophy, and how those experiences shaped A-LIGN's commitment to integrity, quality, and doing the right thing. He also reflects on the challenges of scaling a
cybersecurity company, navigating setbacks, and building a culture centered on trust.

The conversation also explores how cybersecurity and compliance have evolved from back- office responsibilities into board-level priorities, why supply chain risk has become a strategic business concern, and how organizations can build sustainable cybersecurity programs that support long-term growth.

In this episode:
● The leadership lessons that shaped A-LIGN's culture and values
● Why cybersecurity has become a boardroom conversation
● How compliance can unlock business opportunities and build customer trust
● The growing importance of supply chain risk and third-party assurance
● Why sustainable cybersecurity requires more than checking a compliance box

Whether you're a defense contractor, cybersecurity leader, or business executive, this episode offers practical insights on entrepreneurship, trust, and building resilient organizations in an increasingly complex cybersecurity landscape.

In this episode of Mission: Cyber, host Emil Sayegh sits down with Bill Malone, President of Coalfire Federal, to explore the leadership journey behind a nearly four- decade career spanning the U.S. Navy, national security, government services, and cybersecurity.

Bill shares how his early experiences as a naval officer shaped his leadership philosophy, the mentors who influenced his career, and the lessons he learned while navigating the evolution of cybersecurity.

In this episode, you’ll learn: 

• How military service shaped Bill’s approach to leadership, decision-making, and developing teams 
• The importance of listening, mentorship, and continuous learning as a leader 
• The evolution of cybersecurity from an IT function to a board-level business risk 
• How Coalfire Federal became involved in CMMC and the opportunity to help strengthen the Defense Industrial Base 
• The vision behind the CMMC Partner Assurance Network (CPAN) and how trusted partnerships can help organizations navigate compliance challenges 
• The future of cybersecurity, including the shift from “clipboards to code” and the 
  role of automation and AI in continuous compliance

Cybersecurity is no longer simply a technology challenge. It’s a leadership 
responsibility.

Cybersecurity isn't just a technology challenge—it's a leadership challenge.

In the inaugural episode of Mission: Cyber, CyberSheath CEO Emil Sayegh sits down
with Doug Barbin, President and National Managing Principal at Schellman, for a candid
conversation about the leadership decisions that shape resilient cybersecurity
programs.

Together, they explore why trust is essential to building strong security cultures, how AI
is creating new governance challenges, and why organizations should focus on building
defensible cybersecurity programs—not simply passing compliance assessments.

Whether you're preparing for CMMC, leading cybersecurity initiatives, or navigating the
rapid evolution of AI, this episode offers practical insights for executives, security
leaders, and defense contractors alike.

In this episode, you'll learn:

• Why cybersecurity is fundamentally a business challenge—not just an IT issue
• The leadership traits that create resilient security organizations
• How AI is accelerating governance and compliance risks
• Common misconceptions about CMMC readiness
• The difference between being compliant and being truly secure

Listen to the full episode and subscribe for future conversations with the leaders
shaping cybersecurity.