The Virtual CISO Moment

In this episode of The Virtual CISO Moment, Greg Schaffer welcomes back cybersecurity expert and best-selling author Peter H. Gregory — who’s written over 50 books and helped shape many of today’s top security and certification programs.

They dive deep into:

💡 AI Governance — how to use AI safely, ethically, and legally (and why “shadow AI” may be your biggest unseen risk)

📚 Publishing Your Technical Book — Peter’s step-by-step insights from idea to printed page

⚙️ Data Governance & Privacy — why strong data management is essential before implementing AI

Peter also shares details on his upcoming AI Governance Professional (AIGP) study guide and offers timeless advice for aspiring cybersecurity authors.

🎧 Tune in for expert perspectives, practical insights, and a few laughs along the way.

#Cybersecurity #AIGovernance #vCISO #DataPrivacy #InfoSec #PeterHGregory #GregSchaffer #VirtualCISOMoment

Patrick Rost, owner and advisor at InfoSecurity Blueprint, joins Greg Schaffer to discuss his journey from a technology enthusiast to an information security entrepreneur. Patrick shares insights on helping small and midsized businesses take their first steps toward better security—emphasizing that information security is about managing business risk, not just technology.

He explains his “wash one dish” approach to simplifying security, why “InfoSecurity” matters more than “Cybersecurity,” and how fractional advisory services can empower organizations without overwhelming them.

The discussion also explores AI governance for small businesses, risk-based thinking, and how to make security engaging—even fun—for executives.

Walter Haydock, founder of StackAware, joins Greg Schaffer to discuss how AI-powered companies can manage cybersecurity, privacy, and compliance risks using the ISO 42001 AI governance framework.

Learn why AI literacy matters, what organizations can learn from Amazon’s AI missteps, and how to make smarter risk decisions in the age of generative AI.

Recently The Virtual CISO Moment podcast host Greg Schaffer was asked to participate in a question and answer session with students at Minnesota State University who are using his book Information Security for Small and Midsized Businesses as part of their studies. In this special and extended episode, a recoding of that conversation, they talk about concerns of small and midsized businesses and the outlook for the information security and cybersecurity fields.

In this inspiring and deeply personal episode of The Virtual CISO Moment, Greg Schaffer sits down with cybersecurity professional Andrew Staton to discuss his journey from high school CyberPatriot competitions in Huntsville to federal cybersecurity consulting.

Topics Covered:

How local cyber education programs launched Andrew’s career

The evolving landscape of CMMC and compliance misconceptions

Why data scoping is key for affordable federal compliance

The importance of mental health in cybersecurity

Andrew’s personal transformation and rediscovering purpose

Faith, community, and building a healthy cybersecurity lifestyle

Andrew’s story is one of grit, growth, and grace—a must-listen for cyber pros, students, and leaders alike.

In this episode of The Virtual CISO Moment, Greg Schaffer welcomes Brad Mathis, Senior Information Security Consultant at Keller Schroeder, for a wide-ranging discussion that spans four decades in technology and cybersecurity.

From his early days repairing computers and catching his first virus, to leading security teams and serving as a virtual CISO, Brad shares a wealth of real-world experience and insights.

Key highlights include:

• Lessons from building networks in the pre-Windows 95 era

• The importance of risk ownership, even with a vCISO

• What makes a good (and bad) security culture

• How to decompress in a high-stress industry

• The role of mentorship and knowledge transfer in long-term success

Whether you're new to the field or a seasoned security leader, this episode offers perspective, wisdom, and practical takeaways.

In this episode, Greg Schaffer welcomes Christopher Carter, Chairman and CEO of Approyo, for a dynamic conversation about SAP, cybersecurity, and leadership. Chris shares his journey from early days at Coca-Cola to building a successful SAP consulting business, discusses key risks in SAP environments, and explores how AI is shaping threat detection. From monitoring legacy systems to helping clients bounce back from breaches, Chris brings both technical insight and human perspective—plus a little inspiration from Rocky Balboa. A must-listen for anyone navigating enterprise tech, mid-market security, or leadership in the digital age.

On this episode of The Virtual CISO Moment, Wesley Widner shares his inspiring journey from law enforcement to cybersecurity, emphasizing the power of networking, authenticity, and a lifelong learning mindset.

Wes founded White Hat Wes Cybersecurity to help others break into the field by providing a free platform for sharing blogs, projects, and cyber resources—fostering community and mentorship.

He highlights the importance of empathy during incidents, honest communication, and servant leadership as keys to success in InfoSec. Faith and family keep him grounded as he balances career growth and entrepreneurship.

In this episode of *The Virtual CISO Moment*, Greg **Schaffer** sits down with Michael Scheidell, CISO of Security Privateers and Managing Director of Team One Support. Michael shares his unconventional path from robotics to cybersecurity, lessons learned from building companies, and why real-world experience matters more than certifications. He also opens up about stress, service, and his passion for helping veterans transition into IT. A conversation that blends technology, business, and humanity—don’t miss it.

In this episode of The Virtual CISO Moment, Dylan Owen shares his journey from webmaster in the 1990s to leading cybersecurity teams at Raytheon and serving as CISO at Nightwing. He reflects on the challenges of transitioning into executive leadership, the realities of the vCISO role, and how SMBs can best approach detection and response. Dylan also offers insights on making security frictionless, plus how he manages stress with fitness and his love for soccer.