Show Notes
Three major legal changes. One question every CISO should be asking: Is your cybersecurity program ready? Congress let a key FISA surveillance authority expire. The Supreme Court raised the bar on geofence warrants. The Department of Defense paused mandatory CMMC Level 2 certifications. At first glance, these seem like unrelated legal headlines. In reality, they all point to the same challenge: cybersecurity leaders must understand how changing laws affect data access, privacy, compliance, and personal liability. In this episode of CISO Tradecraft, host G. Mark Hardy sits down with attorney and cybersecurity expert Larry Dietz to break down what these legal developments actually mean for CISOs, not from a political perspective, but from a practical leadership perspective. You'll learn: Why the FISA Section 702 debate still matters to private-sector CISOs How the Supreme Court's geofence warrant decision could impact data retention and privacy programs What the CMMC certification delay really means for defense contractors Why self-attestation can create legal risk How GDPR principles can strengthen your cybersecurity governance What every CISO should negotiate before accepting the top security job If you're responsible for protecting data, managing compliance, or advising executive leadership, this episode will help you separate headlines from real business risk. Subscribe for weekly insights that help cybersecurity leaders become more effective.
More from CISO Tradecraft®
What if the reason your cybersecurity budget keeps getting cut isn't your security strategy, but how you negotiate? Every CISO negotiates. Whether you're fighting for a bigger cybersecurity budget, negotiating with vendors, retaining top talent, or navigating a ransomware crisis, your ability to negotiate can determine your success as a security leader.
Should you get a PhD in Cybersecurity? In this episode of CISO Tradecraft, G. Mark Hardy sits down with Dr. Char Sample at the COSAC security conference in Ireland to unpack what it REALLY takes to earn a doctorate in cybersecurity. From her early work on the Gauntlet firewall to cybersecurity research at the Army Research Lab, INL, and Marshall University, Dr. Sample shares hard-earned lessons on research, funding, doctoral programs, and surviving the PhD journey. They also explore: Why a PhD can matter for cybersecurity research funding What makes a strong cybersecurity research problem How long a doctorate can take Research methods, proposals, and defending your work Remote vs. residency programs AI, hallucinated citations, and research reproducibility Why cybersecurity needs more focus on building securely, not just breaking things If you're considering an advanced degree or want to understand where cybersecurity research is headed, this episode is for you. 🎧 Subscribe to CISO Tradecraft for more cybersecurity leadership insights.
In this episode, we reveal the biggest security awareness mistakes and the creative ways to make cybersecurity training actually fun in 2026. From AI-powered phishing and token theft to stronger MFA and gamified training, There are ideas every security leader should steal. Watch now and level up your security awareness game!
Most CISOs spend years learning cybersecurity. Almost nobody teaches them how to build a culture people actually want to be part of. In this episode of CISO Tradecraft, G. Mark Hardy and Ross Young break down the leadership lessons that separate average security organizations from world-class ones. You’ll learn how to: Build a security team people WANT to join Develop your employees into future CISOs Reward behavior that actually changes culture Communicate like an executive Spot when your company may NEVER promote you to CISO Prevent burnout before your best people leave Build trust across the business Create a culture of excellence, accountability, and curiosity Ross also shares how he turned phishing awareness into a company competition, complete with trophies, CEO recognition, and brisket parties. Because great cybersecurity leadership isn't just about stopping hackers. It's about building an organization where great people can do their best work. What’s the ONE leadership rule every CISO should follow? Subscribe to CISO Tradecraft for practical lessons on cybersecurity leadership, strategy, risk, and becoming a more effective CISO. Template for Command Philosophy: https://www.gmarkhardy.com/Navy_Articles/NRA-0306%20Template%20for%20a%20Command%20Philosophy.pdf
The biggest threat to a CISO might not be ransomware, it might be burnout. In this episode, G. Mark Hardy brings on We Hack Health to reveal why brilliant security leaders are sacrificing their health, how accountability can reverse the damage, and the one rule every CISO should follow: Never miss twice. Watch this before your career costs you everything.