Shows / CISO Tradecraft®
CISO Tradecraft®
You are not years away from accomplishing your career goals, you are skills away. Learn the Tradecraft to Take Your Cybersecurity Skills to the Executive Level.
© Copyright 2025, National Security Corporation. All Rights Reserved
Episodes
CISO Tradecraft®#65 - Shall We Play A Game?
Gamification is a superpower that CISOs can use to change the culture of an organization. On this episode of CISO Tradecraft we discuss how to use gamification…
CISO Tradecraft®#64 - 3 Keys to Being a CISO (with Allan Alford)
On this episode of CISO Tradecraft, we feature Allan Alford from The Cyber Ranch Podcast. Allan brings a wealth of knowledge as a CISO and shares the three…
CISO Tradecraft®#63 - Flirting with Disaster
As a cyber executive you should expect disaster and disruption. When these unfortunate events occur, you can protect the business by maintaining critical…
CISO Tradecraft®#62 - Promotion Through Politics
On this episode, we talk about the four types of skills you need to demonstrate in your career to climb through the ranks: (Technical Skills, Management…
CISO Tradecraft®#61 - Presentation Skills
On this episode of CISO Tradecraft, we discuss how to give a great presentation. Starting with the Bottom Line Up Front (BLUF) Using pictures to Capture…
CISO Tradecraft®#60 - CISO Knowledge Domains Part 2
One of the most common questions that we get asked on CISO Tradecraft is what do I need to learn to be a good CISO? After a lot of reflection, CISO Tradecraft…
CISO Tradecraft®#59 - CISO Knowledge Domains Part 1
One of the most common questions that we get asked on CISO Tradecraft is what do I need to learn to be a good CISO? After a lot of reflection, CISO Tradecraft…
CISO Tradecraft®#58 - Active Directory is Active with Attacks
After bad actors gain an initial foothold into an organization, they often use active directory attacks to gain administrative privileges. On this episode of…
CISO Tradecraft®#57 - Brace for Audit
You just got the news that the Cyber Organization is going to be audited. Do you know what an audit is, how best to prepare for it, and how to respond to audit…
CISO Tradecraft®#56 - Say Firewall One More Time
Have you ever heard someone say our firewalls block this type of attack? In this episode, you can increase your understanding of firewalls so it won’t just be…
CISO Tradecraft®#55 - I have more Agents than the FBI
On this episode of CISO Tradecraft you can learn all about Software Agents. Specifically we discuss: What does an Agent do, Why is an Agent helpful, and the 7…
CISO Tradecraft®#54 - The Great Resignation
The Great Resignation is upon us, and if some of your top talent hasn't given you their notice, it may be happening soon. Or not, depending on what you choose…
CISO Tradecraft®#53 - Fun and Games to Stop Bad Actors (with Dr. Neal Krawetz)
In this episode, you can hear from Dr. Neal Krawetz, creator of Hacker Factor and FotoForensics. Neal's a long-time security practitioner who shares some…
CISO Tradecraft®#52 - Welcome to the C-Level (with Nate Warfield)
Special Thanks to our podcast Sponsor, Prevailion. Some of the best C-level executives start in the technical ranks. This episode features Nate Warfield, CTO…
CISO Tradecraft®#51 - New Kid in Town (with Rebecca Mossman)
When you first start a cybersecurity job, or hire someone into a cybersecurity job, there is a window of opportunity to see things with a new perspective. In…
CISO Tradecraft®#50 - Border Gateway Protocol (BGP)
A Border Gateway Protocol (BGP) misconfiguration is what took out Facebook on 4 October. Most IT folks don't understand how BGP works. This episode helps you…
CISO Tradecraft®#49 - Cyberlaw Musings (with Mark Rasch)
This is a special treat. On this episode of CISO Tradecraft you can hear Mark D. Rasch, JD, discuss legal and security topics that he's encountered in his more…
CISO Tradecraft®#48 - Effective Meetings
We've all suffered through horrible meetings that felt like a total waste of time. As a security leader, you'll be convening your fair share of meetings with…
CISO Tradecraft®#47 - More Risky Business with FAIR
In our 31 July 2021 Episode 42, Risky Business, we covered the basics of risk and risk assessment. This part 2 episode gets into the practical application of…
CISO Tradecraft®#46 - Crisis Leadership with G Mark Hardy‘s 9/11 Experience
Have you ever faced a crisis? How well did you do? You should always want to improve your skills in case another happens. On the 20th anniversary of 9/11, G…
CISO Tradecraft®#45 - Protecting your Crown Jewels (with Roselle Safran)
Traditional risk models focus on calculating loss frequency and magnitude, but don't go far enough in terms of modeling the most important assets in our…
CISO Tradecraft®#44 - Intro to Docker Containers and Kubernetes (K8s)
Containers are a lightweight technology that allows applications to deploy to a number of different host Operating Systems without having to make any…
CISO Tradecraft®#43 - Cyber Deception (with Kevin Fiscus)
Join CISO Tradecraft for a fascinating discussion on how to build cyber traps for the bad guys that really work. By creating a deceptive environment that…
CISO Tradecraft®#42 - Third Party Risk Management (with Scott Fairbrother)
Special Thanks to our podcast Sponsor, CyberGRX On today’s episode, we bring in Scott Fairbrother to help tackle key questions with Third Party Risk…
CISO Tradecraft®#41 - Got any Threat Intelligence?
Cyber Threat Intelligence is an important part of an effective CISO arsenal, but many security leaders don’t fully understand how to optimize it for their…
CISO Tradecraft®#40 - Risky Business
In this episode, we take a deep dive into that four-letter word RISK. Risk is measurable uncertainty. As a component of Governance, Risk, and Compliance (GRC)…
CISO Tradecraft®#39 - Stressed Out? Find your Ikigai and 6 Invaluable Factors
Being a CISO has been described as the "toughest job in the world." It comes with a lot of stress, which can lead to early burnout as well as a number of…
CISO Tradecraft®#38 - CMMC and Me
This episode of CISO Tradecraft discusses CMMC. The Cybersecurity Maturity Model Certification (CMMC), is the US government response to the massive amounts of…
CISO Tradecraft®#37 - Cyber Security Laws & Regulations
On this episode of CISO Tradecraft, you will hear about the most prominent Cyber Security Laws and Regulations: The Health Insurance Portability and…
CISO Tradecraft®#36 - IPv6 Your Competitive Advantage (with Joe Klein)
This episode of CISO Tradecraft is all about IPv6, featuring Joe Klein. IPv6 is becoming the dominant protocol on the Internet, and CISOs should understand the…
CISO Tradecraft®#35 - Setting Up an Application Security Program
On this episode of CISO Tradecraft, you can learn how to build an Application Security program. Start with Key Questions for Security IT Operations Application…
CISO Tradecraft®#34 - Metrics that Matter
What is measured gets done. However before you measure you need to think about how best to measure. On this episode of CISO Tradecraft, we provide you new…
CISO Tradecraft®#33 - 10 Steps to Cyber Incident Response Playbooks
On this episode of CISO Tradecraft, you can learn the 10 steps to Incident Response Planning: Establish a Cyber Incident Response Team Develop a 24/7 Contact…
CISO Tradecraft®#32 - Brace for Incident (with Bryan Murphy)
Special Thanks to our podcast Sponsor, CyberArk. Experienced CISOs know that it's not a matter of if, but when. Incidents happen, and there is an established…
CISO Tradecraft®#31 - Executive Order on Improving the Nation’s Cybersecurity
On this episode of CISO Tradecraft, you can learn about the new Executive Order on Improving the Nation's Cyber Security. The episode provides a brief…
CISO Tradecraft®#30 - Cloud Drift (with Yoni Leitersdorf)
This episode is sponsored by Indeni. On this episode of CISO Tradecraft, G Mark Hardy discusses with Yoni Leitersdorf (CEO and CISO of Indeni) the risks which…
CISO Tradecraft®#29 - Identity and Access Management is the New Perimeter
Identity is the New Perimeter. On this episode of CISO Tradecraft you will increase your understanding of Identity and Access Management. Key topics include…
CISO Tradecraft®#28 - AI and ML and How to Tell When Vendors Are Full of It
Have you ever heard a vendor has software features such as Artificial Intelligence (AI) or Machine Learning (ML)? What does that mean? On this episode we…
CISO Tradecraft®#27 - Roses, Buds, & Thorns
Today, CISO Tradecraft hosts a 5 minute discussion to talk about reflection. The concept is Roses, Buds, and Thorns. It’s an exercise designed to identify…
CISO Tradecraft®#26 - Blockchain for CISOs
On this episode CISO Tradecraft we dive into the world of blockchain. As a CISO you may be expected to explain to executives what the technology does and…
CISO Tradecraft®#25 - Slay the Dragon or Save the Princess?
This episode CISO Tradecraft continues the Ransomware Discussion. Do you slay the dragon (avoid the ransom) or save the princess (recover your files)? Talking…
CISO Tradecraft®#24 - Everything you wanted to know about Ransomware
Would you like to know more about Ransomware? On this episode of CISO Tradecraft, G Mark Hardy and Ross Young provide an in-depth discussion on Ransomware. Key…
CISO Tradecraft®#23 - NSA’s Top 10 Cybersecurity Mitigation Strategies
If there's one place that knows how Advanced Persistent Threat (APT) actors work, it's the National Security Agency (NSA). On this episode of CISO Tradecraft G…
CISO Tradecraft®#22 - Modern Software Development Practices
Would you like to know the best practices in modern software development? On this episode G Mark Hardy and Ross Young overview the 12 Factor App and its best…
CISO Tradecraft®#21 - Your First 90 Days as a CISO (with Mark Egan)
This special episode features Mark Egan (Former CIO of Symantec as well as VMWare). Mark discusses what he looks for during interviews with CISOs, what…
CISO Tradecraft®#20 - Zero Trust
Would you actually like to learn about what Zero Trust is without a bunch of marketing jargon? On this week's episode G Mark Hardy and Ross Young provide a…
CISO Tradecraft®#19 - Team Building
Every leader needs to know how to lead and manage a team. On this episode G Mark Hardy and Ross Young share tradecraft on team building. Pitfalls to team…
CISO Tradecraft®#18 - Executive Presence
Having the ability to inspire confidence is crucial to lead others and allows you the opportunity to gain access to executive roles. On this episode G Mark…
CISO Tradecraft®#17 - Global War on Email
If you use email, this episode is for you. Attackers leverage email for ransomware, Business Email Compromise (BEC), account takeover, and other threats that…
CISO Tradecraft®#16 - The Essential Eight
The Australian Cyber Security Center (ACSC) believes that not all cyber security controls are created equal. The have assessed various strategies to mitigate…
CISO Tradecraft®#15 - IT Governance
As a CISO, one of the key functions you will be responsible for is IT Governance. On this episode we discuss what the intent is for a wide variety of…
CISO Tradecraft®#14 - How to Compare Software
At some point in time, a CISO will need to purchase new security technology. Whether it's antivirus, firewalls, or SIEMs you need to understand how to choose a…
CISO Tradecraft®#13 - Executive Competencies
Have you ever wanted to become an executive, but didn’t know what skills to focus on? On this episode of CISO Tradecraft, G Mark Hardy and Ross Young provide…
CISO Tradecraft®#12 - The Three Ways of DevOps
Making things cheaper, faster, and better is the key to gaining competitive advantage. If you can gain a competitive advantage in cyber, then you will reduce…
CISO Tradecraft®#11 - Cryptography
Most organizations generate revenue by hosting online transactions. Cryptography is a key enabler to securing online transactions in untrusted spaces…
CISO Tradecraft®#10 - Securing the Cloud
Understanding how to secure the cloud is a crucial piece of tradecraft that every CISO needs to understand. This episode provides an in depth discussion of…
CISO Tradecraft®#9 - Introduction to the Cloud
Have you ever wanted to learn the basic fundamentals of the cloud? This podcast provides a 50,000 foot view of the cloud. Specific discussions include: What is…
CISO Tradecraft®#8 - Crucial Conversations
CISOs often encounter situations where everyone has a different opinion, it's a high stakes decision, and emotions are running high. These situations create…
CISO Tradecraft®#7 - DevOps
On this Episode we will explore DevOps as a topic and discuss why you need to care as a CISO. Key discussions include: What are the key principles behind…
CISO Tradecraft®#6 - Change Management
If you want to make impact as a leader, then you need to understand how to lead change. This episode overviews Dr. John Kotter's 8-Step process to accelerating…