CISO Tradecraft®
by G Mark Hardy & Ross Young
TechnologyE · Explicit
Latest episode
The Rise of Prompt Kiddies | Jake Bernardes - #306
The Rise of Prompt Kiddies | Jake Bernardes - #306
About this podcast
You are not years away from accomplishing your career goals, you are skills away. Learn the Tradecraft to Take Your Cybersecurity Skills to the Executive Level.
© Copyright 2025, National Security Corporation. All Rights Reserved
Episodes
The newest 50 of 306 episodes
- The Rise of Prompt Kiddies | Jake Bernardes - #306 · 42 min · Episode 306What happens when hackers no longer need to know how to hack? In this episode of CISO Tradecraft, host G. Mark Hardy interviews Jake Bernardes, CISO at Gambit, about how…
- The CISO Operating System | Todd Fitzgerald - #305 · 42 min · Episode 305What Does It REALLY Take to Become a Successful CISO? Todd Fitzgerald reveals the 7 essential elements of cybersecurity leadership that can make or break your security program…
- How Great CISOs Negotiate: Budgets, Ransomware, & Salaries | Mark Rasch - #304 · 36 min · Episode 304What if the reason your cybersecurity budget keeps getting cut isn't your security strategy, but how you negotiate? Every CISO negotiates. Whether you're fighting for a bigger…
- Should you get a PhD in Cybersecurity? | Dr Char Sample - #303 · 36 min · Episode 303Should you get a PhD in Cybersecurity? In this episode of CISO Tradecraft, G. Mark Hardy sits down with Dr. Char Sample at the COSAC security conference in Ireland to unpack what…
- Security Awareness Tips for 2026 - #302 · 43 min · Episode 302In this episode, we reveal the biggest security awareness mistakes and the creative ways to make cybersecurity training actually fun in 2026. From AI-powered phishing and token…
- How to Create a Leadership Culture - #301 · 44 min · Episode 301Most CISOs spend years learning cybersecurity. Almost nobody teaches them how to build a culture people actually want to be part of. In this episode of CISO Tradecraft, G. Mark…
- CISO Health and Accountability Dialogue - #300 · 16 min · Episode 300The biggest threat to a CISO might not be ransomware, it might be burnout. In this episode, G. Mark Hardy brings on We Hack Health to reveal why brilliant security leaders are…
- Claude Code Is INSANE, But Is It Safe? - #299 · 45 min · Episode 299Claude Code Is INSANE… But Is It Safe? AI coding just went from “autocomplete my code” to “give me the entire repository and let me run the company.” In this episode of CISO…
- VCISO Tradecraft | Carlota Sage - #298 · 43 min · Episode 298Most cybersecurity advice is built for massive enterprises. But what happens when you're a small or medium-sized business and you don't have a 200-person security team… or a…
- AI's Biggest Security Problem | Jeff Spear - #297 · 40 min · Episode 297AI can change your network in seconds… but your security approvals still take DAYS. In this episode, Tufin CISO Jeffrey Spear reveals how CISOs can use automation and AI without…
- AI Is Breaking Out and Cybersecurity Isn’t Ready | John Strand - #296 · 45 min · Episode 296What happens when AI stops behaving like a tool, and starts operating beyond the boundaries we gave it? Live from Black Hat, G Mark Hardy sits down with cybersecurity veteran…
- Is AI Leaking Your Company's Trade Secrets | Lee Kim - #295 · 45 min · Episode 295What Every CISO Needs to Know Before AI Leaks Your Company's Crown Jewels Your AI policy won't save you if your trade secrets walk out the door. In this episode of CISO…
- Learning from the Hugging Face Incident | Gadi Evron - #294 · 48 min · Episode 294In this CISO Tradecraft episode, host G Mark Hardy and guest Gadi Evron discuss a recent incident involving OpenAI model testing in an “exploit gym,” where an agent escaped its…
- Legal Developments Every CISO Needs to Know | Larry Dietz - #293 · 41 min · Episode 293Three major legal changes. One question every CISO should be asking: Is your cybersecurity program ready? Congress let a key FISA surveillance authority expire. The Supreme Court…
- The Business Risk Playbook CISOs Use to Win - #292 · 42 min · Episode 292What separates great CISOs from everyone else? It isn't knowing more about CVEs, ransomware, or the latest security tools. It's understanding the business. In this episode of…
- The CISO Mind Map Has Evolved for the AI Era - #291 · 41 min · Episode 291How has the role of the CISO changed over the last 15 years? In this episode of CISO Tradecraft, G. Mark Hardy interviews Rafeeq Rehman, creator of the CISO Mind Map, to discuss…
- Harvest Now, Decrypt Later | Marcus Sachs - #290 · 42 min · Episode 290Nation-state adversaries are vacuuming up encrypted traffic today, waiting for quantum computers to decrypt it tomorrow. This attack strategy, "Harvest Now, Decrypt Later," isn't…
- #289 - What's the Best Career Move After Being a CISO? (with Gary Hayslip) · 44 min · Episode 289On this episode of CISO Tradecraft, host G Mark Hardy talks with Gary Hayslip about cybersecurity career growth beyond the traditional CISO “apex,” drawing on Hayslip’s 25+ years…
- #288 - How to Break Into Cybersecurity Through GRC (with Steve McMichael) · 39 min · Episode 288In this CISO Tradecraft episode, host G Mark Hardy interviews Steve McMichael, author of "How to Break into GRC: Mindset, Methods, and Skills," about entering cybersecurity…
- #287 - Cybersecurity Insights You'll Want to Hear (with Michael Hammer) · 45 min · Episode 287Want to move from "security expert" to "trusted business leader"? Join G. Mark Hardy and Michael Hammer. The mind behind the core of DMARC, for 40 years of hard-won wisdom on…
- #286 - AI-Native Security (with Nishant Doshi & Saro Subbiah) · 46 min · Episode 286What if your next breach isn't caused by a human... but by an AI agent acting exactly as instructed? Cyberhaven's CEO (Nishant Doshi) and SVP of Engineering (Saro Subbiah) reveal…
- #285 - Passwordless Authentication (with Nishant Kaushik) · 42 min · Episode 285In this discussion, G. Mark Hardy and Nishant Kaushik explore the necessity of moving beyond traditional passwords, which they define as the original sin of cybersecurity due to…
- #284 - Lessons Learned from SQL Slammer to AI Agents (with Aaron Turner) · 46 min · Episode 284What can today’s CISOs learn from the chaos of Code Red and SQL Slammer? In this episode, G Mark Hardy interviews Aaron Turner about what it was like responding inside Microsoft…
- #283 - Leadership Lessons and the Art of the Performance (with Chris Brogan) · 48 min · Episode 283In this episode of the CISO Tradecraft podcast, host G Mark Hardy interviews early tech adopter Chris Brogan to explore the intersection of high-performance leadership and…
- #282 - Top 10 Agentic AI Attacks (with Rock Lambros) · 45 min · Episode 282In this CISO Tradecraft episode, host G Mark Hardy interviews recovering CISO Rock Lambros (Zenity) about securing Agentic AI and the emerging risks beyond LLM hallucinations…
- #281 - SIEM Secrets They Don’t Tell You (with Anton Chuvakin & Alex Hurtado) · 48 min · Episode 281In this CISO Tradecraft episode, host G Mark Hardy talks with Anton Chuvakin and Alex Hurtado about how SIEM programs fail and how organizations overspend when implementations…
- #280 - Mythos and the Future of Vulnerability Operations (with Gadi Evron) · 44 min · Episode 280In this episode of CISO Tradecraft, host G Mark Hardy speaks with Gadi Evron about the paper “The AI Vulnerability Storm Building: A Mythos Ready Security Program,” a…
- #279 - AI Readiness (with JP Bourget) · 44 min · Episode 279On CISO Tradecraft, host G Mark Hardy welcomes back JP Bourgeet to discuss what “AI readiness” means for organizations, framing it as both a data governance challenge and a…
- #278 - RSAC Takeaways: AI SOC, Agent Security, and What Cyber Marketing Gets Wrong · 45 min · Episode 278In this CISO Tradecraft episode, G Mark Hardy, Ross Young, and Andy Ellis share RSAC insights from the vendor floor, including Andy’s effort to visit about 607 booths. They…
- #277 - From SaaS to AI Agents: Gone in 60 Seconds · 40 min · Episode 277In this CISO Tradecraft episode, co-hosts G Mark Hardy and Ross Young discuss how large language models are transforming software development and shifting cybersecurity from…
- #276 - How is AI Reshaping Fraud (with Brian Long) · 41 min · Episode 276In this episode of CISO Tradecraft, host G Mark Hardy speaks with Brian Long, CEO and co-founder of Adaptive Security, about how AI is accelerating and scaling social engineering…
- #275 - How to Secure Vibe Code (with Shahar Man) · 46 min · Episode 275In this CISO Tradecraft episode, host G Mark Hardy interviews Shahar Man of Backslash Security about the rapidly expanding attack surface created by AI-driven “vibe coding” tools…
- #274 - The State of Stress in Cyber (with Steve Shelton) · 45 min · Episode 274In this CISO Tradecraft episode, host G Mark Hardy interviews Steve Shelton (https://www.linkedin.com/in/greenshoesteve/) of Green Shoe Consulting about the “State of Stress in…
- #273 - Creating a Wisdom-Led SOC (with Oren Saban) · 45 min · Episode 273Your SOC is drowning in alerts, false positives, and static tuning, while attackers evolve faster than your team can respond. Analysts burn out chasing noise. Real threats slip…
- #272 - Data Centric Platform Play (with EJ Pappas) · 60 min · Episode 272In this episode of CISO Tradecraft, host G Mark Hardy speaks with EJ Pappas of PKWARE and Ross Young about why AI-driven threats demand a shift from platform-centric security to…
- #271 - A Life of Service (with Chris Inglis) · 53 min · Episode 271In this special episode of CISO Tradecraft, host G Mark Hardy welcomes Chris Inglis, former National Cyber Director and career public servant, to delve into a wide-ranging…
- #270 - And What is Truth? · 31 min · Episode 270Can you still tell what’s true on the internet or does everything feel questionable now? That confusion isn’t accidental. Disinformation, deepfakes, and cyber deception are…
- #269 - Changing Third Party Risk Management (with Nate Lee) · 34 min · Episode 269Third-party risk management has become a time-consuming, frustrating exercise. Security teams and vendors alike are buried under long, repetitive TPRM questionnaires that often…
- #268 - Zero Trust isn't a product (with George Finney) · 46 min · Episode 268Everyone talks about Zero Trust — but very few organizations actually know how to implement it successfully. In this episode of CISO Tradecraft, host G. Mark Hardy is joined by…
- #267 - Busy is the New Stupid (with Ross Young) · 46 min · Episode 267You’re working longer hours than ever… yet somehow getting less done. Sound familiar? In this episode of CISO Tradecraft, we break down why busy has become the enemy of…
- #266 - Why CISOs Miss The Next Big Security Challenge (with Richard Stiennon) · 45 min · Episode 266CISOs are expected to anticipate the next major security failure, yet the cybersecurity market is moving too fast, too fragmented, and too noisily for any leader to clearly see…
- #265 - 12 CISO Templates (with Ross Young) · 45 min · Episode 265In this episode of CISO Tradecraft, hosts G Mark Hardy and Ross Young discuss the extensive redesign at CISO Tradecraft and introduce a series of free cybersecurity tools and…
- #264 - Behavioral Insights (with Dr. Dustin Sachs) · 46 min · Episode 264Most cybersecurity programs are built on rigid “best practices” that assume people will behave rationally, consistently, and exactly as policy dictates; even under stress, time…
- #263 - Stopping Attacks To Your Cloud Office Environment (with Rajan Kapoor) · 45 min · Episode 263In this episode of CISO Tradecraft, host G Mark Hardy welcomes special guest Rajan Kapoor, VP of Security at Material Security, to discuss critical topics in cloud workspace…
- #262 - AI Mastery for CISOs: What You Must Know · 46 min · Episode 262Dive into the rapidly evolving world of AI with G Mark Hardy and Ross Young in this episode of CISO Tradecraft. Explore how AI is transforming business processes, the critical…
- #261 - Vibe Coding Security (with Neatsun Ziv) · 46 min · Episode 261In this episode of CISO Tradecraft, host G Mark Hardy is joined by Neatsun Ziv from Ox Security to discuss the evolving landscape of vibe coding and its security implications…
- #260 - Mastering Defense Against Configurations ( with Yuriy Tsibere) · 36 min · Episode 260In this episode of CISO Tradecraft, host G Mark Hardy is joined by Yuriy Tsibere from ThreatLocker to discuss an essential topic for cybersecurity leaders: Defense Against…
- #259 - Transforming Security Operations (with Brian Carbaugh and William Macmillan) · 40 min · Episode 259Join host G Mark Hardy in an exciting episode of CISO Tradecraft where we delve into the cutting-edge world of Human AI Security Operation Centers (SOCs). With special guests…
- #258 - From Invention to Entrepreneurship (with Jeri Ellsworth) · 44 min · Episode 258In this captivating episode of CISO Tradecraft, hosted by G. Mark Hardy, we delve into the incredible life journey of Jeri Ellsworth—a renowned inventor and tech entrepreneur…
- #257 - Patch or Perish (with Ross Young) · 28 min · Episode 257Imagine stepping into a role and discovering your predecessor had been severely underreporting vulnerabilities, leaving your systems 300 days behind on patches. Join G Mark Hardy…
