Zero-Trust Issues

You’re a CISO who rolled out MFA and an identity provider a while back, and leadership now treats identity as handled. Meanwhile, your teams keep adding AI agents, API keys, and new integrations faster than anyone can count them. Securing the login was a real step forward, but identities keep working long after someone signs in, and that’s where much of the exposure can sit.

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, talk with James Carder, Chief Security Strategist at Flare, about why identity remains a primary target and where many organizations may be looking in the wrong place. James explains how stolen session cookies, shared devices, aging keys, and blended human and AI agent permissions can create gaps that MFA alone may not cover, and Tony presses on how security priorities hold up when every part of the business says its needs come first.

James discusses:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with James Carder:

What happens when a cyberattack becomes public and the person responsible for leading the response isn’t available? Without clear decision-making authority, backup leadership, and a rehearsed communication plan, an already difficult situation can become even more complicated.

In this episode of Zero-Trust Issues, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder discuss public cyber incident readiness with guest Lou Rabon, Founder & CEO of Cyber Defense Group. The conversation emphasizes executive participation, clear response roles, communication planning, and backup leadership.

Tony asks what a CEO can focus on in the first day or two, and why executive preparation influences the way teams respond. The discussion gives security leaders practical questions to bring into their next rehearsal.

Lou brings his incident response expertise to that host-led discussion. He explains how realistic rehearsals can reveal leadership and communication gaps. 

Key takeaways to explore:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Lou Rabon:

Cybersecurity requirements can feel expensive, complicated, and disconnected from daily operations. What changes when leaders treat compliance as ongoing risk management instead of paperwork?

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, speak with Beth Leonard, Chief Operating Officer of R3 LLC, about turning cybersecurity strategy into consistent execution. 

Beth explains how CMMC, NIST 800-171, FedRAMP, ISO standards, formal risk management, and regular leadership reviews can become part of everyday operations. She also shares firsthand examples of what can happen when organizations delay controls, confuse documentation with implementation, or treat compliance as a checkbox.

Beth discusses:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Beth Leonard:

How should defense contractors respond to the CMMC pause? Questions about assessment timing, preparation costs, and CMMC requirements are leaving many organizations unsure whether to continue.

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, speak with Rick Olivier, Director of Cybersecurity Advisory at Eide Bailly, about how contractors can prepare without overhauling their entire technology environment. Rick explains how controlled unclassified information determines CMMC scope, when a focused enclave may reduce cost and disruption, and how MSP access can expand the assessment scope. They also cover C3PAO assessments, continuous monitoring, and readiness gaps that can waste time and money.

Key takeaways:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Rick Olivier:

If the FTC reviewed your car dealership today, could you prove that your cybersecurity practices match your written policies and protect customer data?

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, speak with James S. Ganther, Owner and CEO of Mosaic Compliance Services, about FTC Safeguards Rule compliance for car dealerships. They explain why written policies and purchased technology aren’t enough without testing and verification. The conversation covers phishing, employee training, risk assessments, qualified individuals, and network vulnerability assessments. James also explains how dealerships can document that their cybersecurity controls work as intended.

Key takeaways:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with James S. Ganther:

As organizations face growing cybersecurity hiring challenges, cybersecurity staffing shortages, and uncertainty around how AI will impact cybersecurity careers, security leaders are being forced to rethink how they recruit, develop, and retain talent.

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, sit down with Julia Armstrong, Executive Director of the Institute for Cybersecurity and Digital Trust at The Ohio State University, to discuss the cybersecurity talent shortage, skills-based hiring, workforce development, and the future of cybersecurity careers. Their conversation explores how universities, industry, and government can work together to prepare the next generation of cyber professionals and build stronger, more resilient security teams.

Key takeaways:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Julia Armstrong:

Security incidents don’t usually start because someone is careless. They often start because someone is human, busy, tired, rushed, and trying to do the right thing.

In this conversation, Tony Pietrocola and Joe Marquette sit down with Rick Mischka, Head of Resilience and Senior Director of Education Enablement at AVANT Communications, to break down the psychology behind cybersecurity. They explore why people shouldn’t be dismissed as the “weakest link,” how attackers target attention and trust, and what leaders need to understand about building security programs around real human behavior.

Key takeaways:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Rick Mischka:

What happens when AI starts finding vulnerabilities faster than security teams can respond? As AI becomes a force multiplier for both defenders and attackers, organizations face a new reality where speed, scale, and decision-making matter more than ever.

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, are joined by Andrew Desender, Senior Security Consultant at AgileBlue, and Dylan Marcoux, Founder and Principal Consultant at Aurora Cybersecurity. 

Together, they explore how emerging AI models are accelerating vulnerability discovery, changing how threat actors operate, and creating new leadership challenges for organizations trying to balance security, resilience, and operational continuity.

Key Takeaways:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Andrew Desender:

Connect with Dylan Marcoux:

Cybersecurity isn’t just something the IT department handles anymore; it’s become a business issue that leaders across the organization must consider every day.

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, sit down with Jason Collins, Chief Information Security Officer at Fit Technologies, a 100% employee-owned MSP based in Cleveland, Ohio.

They talk about how cybersecurity has changed over the years, from a behind-the-scenes IT function to a major part of business operations and decision-making. Jason shares why MSPs need to be more intentional about how they grow their security capabilities, how AI is accelerating both threats and innovation, and why people still play such a big role in successful phishing attacks. He also talks about the importance of understanding your environment before adopting new AI tools, and why real partnerships matter far more than simply stacking vendors.

Key takeaways:

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Jason Collins:

Most cybersecurity conversations focus on tools and threats. The better ones focus on people, trust, and how leaders actually show up when things go sideways.

In this episode, Tony Pietrocola, President and Co-founder of AgileBlue, and Joe Marquette, CEO and Co-founder, sit down with Becky Cross, Vice President of Client Partnerships at FIT Technologies.

They get into how cybersecurity leadership is shifting, what clients actually need in high-pressure moments, and why the way we communicate risk matters just as much as the technology behind it.

Becky brings a perspective that’s grounded in real client experience. Less noise, more clarity. Less fear, more trust. And a clear argument for why different perspectives lead to better decisions when it matters most.

Key takeaways:

Connect with Tony Pietrocola:

Connect with Becky Cross: