The conversation delves into the reevaluation of security awareness programs, reframing the discipline around psychology and learning science. It emphasizes the need to develop employees as assets and the importance of discernment over mere awareness.

The episode delves into the concept of Zero Trust as an architectural philosophy, emphasizing the replacement of IP addresses with identity as the trust anchor. It explores traditional security versus Zero Trust, common mistakes in Zero Trust implementation are also discussed, highlighting the need for deliberate trust and tailored security practices.

In this episode, Glitch and Cypher discuss the challenges of selling enterprise architecture initiatives to the business, the role of enterprise architecture, the importance of governance, and the distinction between cybersecurity assessments and audits. The conversation delves into the importance of supporting business through technology, the significance of assessments and audits, the role of independent assessments, and the value of governance in enterprise architecture. It also highlights the need for collaboration and the impact of governance on operational efficiency.

In this episode, Glitch and Cypher discuss the demystification of zero trust and the first steps to take in implementing it. They cover asset management, data classification, and authentication as foundational elements of zero trust. The conversation emphasizes the need for collaboration with the business and the evolution of security practices to adapt to modern threats.

In this episode, we discuss the concept of Zero Trust and its core principles, the challenges of implementing Zero Trust, the importance of architecture and culture, the impact of human behavior on security, and the role of identity in modern security.

The conversation delves into the critical aspects of Third Party Security Risk Management (TPSRM), emphasizing the importance of continuous monitoring, vendor management, and the real impact of security. It explores challenges in TPSRM, differentiation of vendors, and the need to tailor TPSRM for different vendors.

The conversation delves into the distinction between leadership and management, highlighting the roles and responsibilities of each. It explores the traits of a good leader, the challenges of transitioning to a managerial role, and the impact of technical skills on leadership.

The conversation delves into the essential concepts of Business Continuity (BC), Disaster Recovery (DR), Business Impact Analysis (BIA), Recovery Time Objective (RTO), and Recovery Point Objective (RPO), highlighting their complementary nature and the importance of ongoing conversations with the business to ensure effective resilience.

Discussing the marriage of security and IT, focusing on vulnerability management, SDLC, and culture shift. It emphasizes the importance of open dialogue, education, and collaboration between security and IT teams.

Who we are, what we do, and why that matters to you. This is a primer on how we're different - because we live in the real world where legacy tech, nonexistent processes, and complacent people who like to wallow.