#179 - The 7 Broken Pillars of Cybersecurity

CISO Tradecraft®

In this episode of CISO Tradecraft, host G. Mark Hardy discusses seven critical issues facing the cybersecurity industry, offering a detailed analysis of each problem along with counterarguments. The concerns range from the lack of a unified cybersecurity license, the inefficiency and resource waste caused by auditors, to the need for a federal data privacy law. Hardy emphasizes the importance of evaluating policies, prioritizing effective controls, and examining current industry practices. He challenges the audience to think about solutions and encourages sharing opinions and additional concerns, aiming to foster a deeper understanding and improvement within the field of cybersecurity.

Transcripts: https://docs.google.com/document/d/1H_kTbCG8n5f_d1ZHNr1QxsXf82xb08cG

Chapters

• 00:00 Introduction
• 01:28 Introducing the Seven Broken Things in Cybersecurity
• 02:00 1. The Lack of a Unified Cybersecurity License
• 06:53 2. The Problem with Cybersecurity Auditors
• 10:09 3. The Issue with Treating All Controls as High Priority
• 14:12 4. The Obsession with New Cybersecurity Tools
• 19:23 5. Misplaced Accountability in Cybersecurity
• 22:38 6. Rethinking Degree Requirements for Cybersecurity Jobs
• 26:49 7. The Need for Federal Data Privacy Laws
• 30:53 Closing Thoughts and Call to Action