{"version":"1.0.0","segments":[{"speaker":"Spencer","startTime":3.99,"endTime":7.41,"body":"How do you keep the"},{"speaker":"Spencer","startTime":3.99,"endTime":7.41,"body":"lights on working in IT as a"},{"speaker":"Spencer","startTime":7.53,"endTime":12.93,"body":"sysadmin or a cybersecurity"},{"speaker":"Spencer","startTime":7.53,"endTime":12.93,"body":"admin or a cybersecurity analyst"},{"speaker":"Spencer","startTime":13.11,"endTime":17.25,"body":"without while preventing cyber"},{"speaker":"Spencer","startTime":13.11,"endTime":17.25,"body":"attacks? Essentially, that's the"},{"speaker":"Spencer","startTime":17.4,"endTime":21.74,"body":"topic of today's episode. We're"},{"speaker":"Spencer","startTime":17.4,"endTime":21.74,"body":"going to talk about burnout."},{"speaker":"Spencer","startTime":22.31,"endTime":25.94,"body":"We're going to talk about IT"},{"speaker":"Spencer","startTime":22.31,"endTime":25.94,"body":"admins, security professionals."},{"speaker":"Spencer","startTime":26.57,"endTime":31.07,"body":"How can we kind of keep pace,"},{"speaker":"Spencer","startTime":26.57,"endTime":31.07,"body":"stay up to date, while not"},{"speaker":"Spencer","startTime":31.16,"endTime":34.43,"body":"killing ourselves, while not"},{"speaker":"Spencer","startTime":31.16,"endTime":34.43,"body":"burning out, and while defending"},{"speaker":"Spencer","startTime":34.52,"endTime":38.15,"body":"our organizations? Right,"},{"speaker":"Spencer","startTime":34.52,"endTime":38.15,"body":"because we predominantly like to"},{"speaker":"Spencer","startTime":38.21,"endTime":41.65,"body":"talk to folks who are in the"},{"speaker":"Spencer","startTime":38.21,"endTime":41.65,"body":"trenches, securing their"},{"speaker":"Spencer","startTime":41.65,"endTime":45.4,"body":"organizations. We talk on this"},{"speaker":"Spencer","startTime":41.65,"endTime":45.4,"body":"podcast to our clients, to our"},{"speaker":"Spencer","startTime":45.43,"endTime":49.0,"body":"future clients, about the things"},{"speaker":"Spencer","startTime":45.43,"endTime":49.0,"body":"that you can do to secure your"},{"speaker":"Spencer","startTime":49.03,"endTime":51.67,"body":"organization. So that's what"},{"speaker":"Spencer","startTime":49.03,"endTime":51.67,"body":"we're going to talk about in"},{"speaker":"Spencer","startTime":51.67,"endTime":55.63,"body":"this episode. And the reason for"},{"speaker":"Spencer","startTime":51.67,"endTime":55.63,"body":"this is I've had a number of"},{"speaker":"Spencer","startTime":55.69,"endTime":59.98,"body":"conversations with folks, both"},{"speaker":"Spencer","startTime":55.69,"endTime":59.98,"body":"clients and with people on"},{"speaker":"Spencer","startTime":60.04,"endTime":66.03,"body":"Twitter, about this idea that"},{"speaker":"Spencer","startTime":60.04,"endTime":66.03,"body":"you just need X, Y, and Z to be"},{"speaker":"Spencer","startTime":66.15,"endTime":69.93,"body":"secure, right? You just need to"},{"speaker":"Spencer","startTime":66.15,"endTime":69.93,"body":"like the latest debate for me is"},{"speaker":"Spencer","startTime":70.02,"endTime":72.54,"body":"you just need to move to Entra"},{"speaker":"Spencer","startTime":70.02,"endTime":72.54,"body":"because Entra has secure"},{"speaker":"Spencer","startTime":72.57,"endTime":76.23,"body":"defaults, and like you just need"},{"speaker":"Spencer","startTime":72.57,"endTime":76.23,"body":"to get off of Active Directory"},{"speaker":"Spencer","startTime":76.23,"endTime":80.96,"body":"and you'll be way more secure."},{"speaker":"Spencer","startTime":76.23,"endTime":80.96,"body":"And of course, that conversation"},{"speaker":"Spencer","startTime":80.99,"endTime":84.32,"body":"naturally leads to well, no,"},{"speaker":"Spencer","startTime":80.99,"endTime":84.32,"body":"that's not actually true. But"},{"speaker":"Spencer","startTime":84.35,"endTime":88.64,"body":"then the second thing is, with"},{"speaker":"Spencer","startTime":84.35,"endTime":88.64,"body":"all of the advancements in AI"},{"speaker":"Spencer","startTime":89.12,"endTime":92.66,"body":"and technology and"},{"speaker":"Spencer","startTime":89.12,"endTime":92.66,"body":"cybersecurity, it feels like IT"},{"speaker":"Spencer","startTime":92.78,"endTime":95.12,"body":"admins just can't keep up. It"},{"speaker":"Spencer","startTime":92.78,"endTime":95.12,"body":"feels like everything is"},{"speaker":"Spencer","startTime":95.18,"endTime":99.17,"body":"constantly changing. Everything"},{"speaker":"Spencer","startTime":95.18,"endTime":99.17,"body":"is in flux. Leadership just"},{"speaker":"Spencer","startTime":99.2,"endTime":103.09,"body":"doesn't understand how much time"},{"speaker":"Spencer","startTime":99.2,"endTime":103.09,"body":"and effort and money is required"},{"speaker":"Spencer","startTime":103.15,"endTime":106.72,"body":"to actually secure systems? And"},{"speaker":"Spencer","startTime":103.15,"endTime":106.72,"body":"we have all of these boulders"},{"speaker":"Spencer","startTime":106.87,"endTime":109.18,"body":"that IT people and security"},{"speaker":"Spencer","startTime":106.87,"endTime":109.18,"body":"people are trying to move"},{"speaker":"Spencer","startTime":109.36,"endTime":112.96,"body":"uphill, and they're trying to"},{"speaker":"Spencer","startTime":109.36,"endTime":112.96,"body":"move several of them uphill at"},{"speaker":"Spencer","startTime":113.02,"endTime":117.94,"body":"once. And it becomes a very"},{"speaker":"Spencer","startTime":113.02,"endTime":117.94,"body":"difficult game to keep your"},{"speaker":"Spencer","startTime":118.03,"endTime":122.4,"body":"sanity and help secure your"},{"speaker":"Spencer","startTime":118.03,"endTime":122.4,"body":"organization, so that's the kind"},{"speaker":"Spencer","startTime":122.43,"endTime":123.99,"body":"of the preface for this episode."},{"speaker":"Brad Causey","startTime":124.71,"endTime":127.86,"body":"Yeah, and I think"},{"speaker":"Brad Causey","startTime":124.71,"endTime":127.86,"body":"it, I think it, it exists at"},{"speaker":"Brad Causey","startTime":128.01,"endTime":132.24,"body":"every level of of organizational"},{"speaker":"Brad Causey","startTime":128.01,"endTime":132.24,"body":"size, right? So, so my"},{"speaker":"Brad Causey","startTime":132.39,"endTime":135.48,"body":"background is in very, very"},{"speaker":"Brad Causey","startTime":132.39,"endTime":135.48,"body":"large organizations, 1015,"},{"speaker":"Brad Causey","startTime":135.51,"endTime":139.23,"body":"20,000 employees, and and I"},{"speaker":"Brad Causey","startTime":135.51,"endTime":139.23,"body":"would almost argue that the"},{"speaker":"Brad Causey","startTime":139.32,"endTime":142.82,"body":"burnout is less on the larger"},{"speaker":"Brad Causey","startTime":139.32,"endTime":142.82,"body":"organizations, because you have"},{"speaker":"Brad Causey","startTime":142.91,"endTime":146.27,"body":"more shoulders to carry the"},{"speaker":"Brad Causey","startTime":142.91,"endTime":146.27,"body":"burden, it's really hard as you"},{"speaker":"Brad Causey","startTime":146.33,"endTime":149.57,"body":"get down into smaller IT"},{"speaker":"Brad Causey","startTime":146.33,"endTime":149.57,"body":"organizations that carry the you"},{"speaker":"Brad Causey","startTime":149.57,"endTime":152.39,"body":"know multiple hats and things of"},{"speaker":"Brad Causey","startTime":149.57,"endTime":152.39,"body":"that nature. But I think the"},{"speaker":"Brad Causey","startTime":152.57,"endTime":156.89,"body":"first step is to acknowledge the"},{"speaker":"Brad Causey","startTime":152.57,"endTime":156.89,"body":"burnout, and I think that's"},{"speaker":"Brad Causey","startTime":156.98,"endTime":160.58,"body":"something that a lot of"},{"speaker":"Brad Causey","startTime":156.98,"endTime":160.58,"body":"management has not necessarily"},{"speaker":"Brad Causey","startTime":160.61,"endTime":163.33,"body":"done, and and I and I think"},{"speaker":"Brad Causey","startTime":160.61,"endTime":163.33,"body":"especially for managers who have"},{"speaker":"Brad Causey","startTime":163.33,"endTime":165.67,"body":"never been in the trenches,"},{"speaker":"Brad Causey","startTime":163.33,"endTime":165.67,"body":"right? And it's not to take away"},{"speaker":"Brad Causey","startTime":165.76,"endTime":169.27,"body":"from anybody or cascade on guys"},{"speaker":"Brad Causey","startTime":165.76,"endTime":169.27,"body":"who are managing technical staff"},{"speaker":"Brad Causey","startTime":169.36,"endTime":172.39,"body":"and maybe aren't technical, but"},{"speaker":"Brad Causey","startTime":169.36,"endTime":172.39,"body":"I do think that acknowledging"},{"speaker":"Brad Causey","startTime":172.78,"endTime":175.75,"body":"that this is a problem is"},{"speaker":"Brad Causey","startTime":172.78,"endTime":175.75,"body":"probably the first step in"},{"speaker":"Brad Causey","startTime":175.78,"endTime":178.09,"body":"understanding what we can do to"},{"speaker":"Brad Causey","startTime":175.78,"endTime":178.09,"body":"to solve it. And and I think"},{"speaker":"Brad Causey","startTime":178.12,"endTime":180.15,"body":"there's multiple approaches, and"},{"speaker":"Brad Causey","startTime":178.12,"endTime":180.15,"body":"we're going to cover some of"},{"speaker":"Brad Causey","startTime":180.15,"endTime":181.47,"body":"those as part of this episode."},{"speaker":"Spencer","startTime":182.399,"endTime":184.709,"body":"So a trend that I've"},{"speaker":"Spencer","startTime":182.399,"endTime":184.709,"body":"noticed, Brad, and you've"},{"speaker":"Spencer","startTime":184.769,"endTime":189.689,"body":"probably noticed this too, is"},{"speaker":"Spencer","startTime":184.769,"endTime":189.689,"body":"back when we were in IT and we"},{"speaker":"Spencer","startTime":189.809,"endTime":193.799,"body":"did enterprise security things"},{"speaker":"Spencer","startTime":189.809,"endTime":193.799,"body":"like that. We were IT was"},{"speaker":"Spencer","startTime":193.919,"endTime":196.499,"body":"primarily responsible for"},{"speaker":"Spencer","startTime":193.919,"endTime":196.499,"body":"keeping the lights on. Yeah,"},{"speaker":"Spencer","startTime":196.859,"endTime":199.979,"body":"keep the lights on, just keep"},{"speaker":"Spencer","startTime":196.859,"endTime":199.979,"body":"things working, fix the"},{"speaker":"Spencer","startTime":200.069,"endTime":204.469,"body":"printers, like reset passwords,"},{"speaker":"Spencer","startTime":200.069,"endTime":204.469,"body":"you know, like patch, you know,"},{"speaker":"Spencer","startTime":204.829,"endTime":209.029,"body":"update the systems, but then"},{"speaker":"Spencer","startTime":204.829,"endTime":209.029,"body":"somewhere in the last I don't"},{"speaker":"Spencer","startTime":209.029,"endTime":212.719,"body":"know five or 10 years or"},{"speaker":"Spencer","startTime":209.029,"endTime":212.719,"body":"something like that, keeping the"},{"speaker":"Spencer","startTime":212.869,"endTime":215.959,"body":"lights on transition to also"},{"speaker":"Spencer","startTime":212.869,"endTime":215.959,"body":"preventing cyber attacks."},{"speaker":"Brad Causey","startTime":216.529,"endTime":216.589,"body":"Yeah,"},{"speaker":"Spencer","startTime":217.189,"endTime":220.569,"body":"and I've noticed that"},{"speaker":"Spencer","startTime":217.189,"endTime":220.569,"body":"in my own career, I went from"},{"speaker":"Spencer","startTime":220.599,"endTime":224.109,"body":"help desk to sysadmin to then"},{"speaker":"Spencer","startTime":220.599,"endTime":224.109,"body":"security, but I was do still"},{"speaker":"Spencer","startTime":224.139,"endTime":227.409,"body":"doing sysadmin stuff. That was"},{"speaker":"Spencer","startTime":224.139,"endTime":227.409,"body":"part of my responsibility. Still"},{"speaker":"Spencer","startTime":227.589,"endTime":231.039,"body":"was to do sysadmin stuff, but I"},{"speaker":"Spencer","startTime":227.589,"endTime":231.039,"body":"also had security"},{"speaker":"Spencer","startTime":231.129,"endTime":235.269,"body":"responsibilities. And I noticed"},{"speaker":"Spencer","startTime":231.129,"endTime":235.269,"body":"this trend, and I noticed this"},{"speaker":"Spencer","startTime":235.329,"endTime":239.109,"body":"with the people that I talked to"},{"speaker":"Spencer","startTime":235.329,"endTime":239.109,"body":"is that IT people now have the"},{"speaker":"Spencer","startTime":239.199,"endTime":242.489,"body":"responsibility of both keeping"},{"speaker":"Spencer","startTime":239.199,"endTime":242.489,"body":"the lights on and preventing"},{"speaker":"Spencer","startTime":242.609,"endTime":248.429,"body":"cyber attacks, and part of the"},{"speaker":"Spencer","startTime":242.609,"endTime":248.429,"body":"reason for that, I theorize, is"},{"speaker":"Spencer","startTime":248.549,"endTime":254.129,"body":"IT hasn't necessarily kept up to"},{"speaker":"Spencer","startTime":248.549,"endTime":254.129,"body":"speed with the changing pace of"},{"speaker":"Spencer","startTime":254.429,"endTime":259.619,"body":"cybersecurity. IT people"},{"speaker":"Spencer","startTime":254.429,"endTime":259.619,"body":"predominantly are not security"},{"speaker":"Spencer","startTime":259.679,"endTime":262.879,"body":"people by nature, right? There"},{"speaker":"Spencer","startTime":259.679,"endTime":262.879,"body":"are security aspects of the job,"},{"speaker":"Spencer","startTime":263.329,"endTime":266.299,"body":"but they're not security people."},{"speaker":"Spencer","startTime":263.329,"endTime":266.299,"body":"They're not on Twitter. They're"},{"speaker":"Spencer","startTime":266.359,"endTime":269.449,"body":"not reading about security stuff"},{"speaker":"Spencer","startTime":266.359,"endTime":269.449,"body":"like they're IT people,"},{"speaker":"Spencer","startTime":269.899,"endTime":274.219,"body":"rightfully so. And there's been"},{"speaker":"Spencer","startTime":269.899,"endTime":274.219,"body":"a lot of advancements with"},{"speaker":"Spencer","startTime":274.219,"endTime":278.269,"body":"technology thanks to AI in"},{"speaker":"Spencer","startTime":274.219,"endTime":278.269,"body":"recent years. That if you're"},{"speaker":"Spencer","startTime":278.299,"endTime":281.799,"body":"just not keeping up to date"},{"speaker":"Spencer","startTime":278.299,"endTime":281.799,"body":"with, you just don't know about,"},{"speaker":"Spencer","startTime":281.859,"endTime":285.189,"body":"and it kind of passes you by."},{"speaker":"Spencer","startTime":281.859,"endTime":285.189,"body":"And the third thing I want to"},{"speaker":"Spencer","startTime":285.219,"endTime":290.199,"body":"bring up for kind of comment"},{"speaker":"Spencer","startTime":285.219,"endTime":290.199,"body":"from you on is leadership, and"},{"speaker":"this ties on to what you said","startTime":290.529,"endTime":293.319,"body":"is leadership has not been in"},{"speaker":"this ties on to what you said","startTime":293.409,"endTime":298.569,"body":"the trenches; they're not"},{"speaker":"this ties on to what you said","startTime":293.409,"endTime":298.569,"body":"technical enough to know that"},{"speaker":"this ties on to what you said","startTime":299.019,"endTime":302.159,"body":"things have shifted. It takes"},{"speaker":"this ties on to what you said","startTime":299.019,"endTime":302.159,"body":"much more time, money, and"},{"speaker":"this ties on to what you said","startTime":302.159,"endTime":305.939,"body":"effort than it used to, to both"},{"speaker":"this ties on to what you said","startTime":302.159,"endTime":305.939,"body":"secure an environment and to"},{"speaker":"this ties on to what you said","startTime":306.269,"endTime":310.079,"body":"keep the lights on. And so I"},{"speaker":"this ties on to what you said","startTime":306.269,"endTime":310.079,"body":"think there's this trend, the"},{"speaker":"this ties on to what you said","startTime":310.229,"endTime":315.629,"body":"last 510, years of how do we"},{"speaker":"this ties on to what you said","startTime":310.229,"endTime":315.629,"body":"this last this trend of keeping"},{"speaker":"this ties on to what you said","startTime":315.659,"endTime":318.419,"body":"the lights on to preventing"},{"speaker":"this ties on to what you said","startTime":315.659,"endTime":318.419,"body":"cyber attacks, and it's putting"},{"speaker":"this ties on to what you said","startTime":318.509,"endTime":322.759,"body":"an incredible burned on IT"},{"speaker":"this ties on to what you said","startTime":318.509,"endTime":322.759,"body":"admins, yeah, and causing some"},{"speaker":"this ties on to what you said","startTime":322.849,"endTime":325.999,"body":"of this, you know, this burnout"},{"speaker":"this ties on to what you said","startTime":322.849,"endTime":325.999,"body":"and this frustration."},{"speaker":"Brad Causey","startTime":326.51,"endTime":328.43,"body":"So I think the"},{"speaker":"Brad Causey","startTime":326.51,"endTime":328.43,"body":"first thing to address, and and"},{"speaker":"Brad Causey","startTime":328.46,"endTime":330.32,"body":"I'm going to come back to the"},{"speaker":"Brad Causey","startTime":328.46,"endTime":330.32,"body":"leadership piece, but I want to"},{"speaker":"Brad Causey","startTime":330.32,"endTime":333.56,"body":"talk about your second point,"},{"speaker":"Brad Causey","startTime":330.32,"endTime":333.56,"body":"which is, you know, IT keeping"},{"speaker":"Brad Causey","startTime":333.74,"endTime":338.51,"body":"up with cyber, and and if you"},{"speaker":"Brad Causey","startTime":333.74,"endTime":338.51,"body":"are in a break fix, what what we"},{"speaker":"Brad Causey","startTime":338.51,"endTime":341.41,"body":"we always called it an"},{"speaker":"Brad Causey","startTime":338.51,"endTime":341.41,"body":"operational role, right? If"},{"speaker":"Brad Causey","startTime":341.5,"endTime":345.19,"body":"you're in a break fix role, you"},{"speaker":"Brad Causey","startTime":341.5,"endTime":345.19,"body":"cannot be in charge of cyber."},{"speaker":"Brad Causey","startTime":345.34,"endTime":350.35,"body":"You cannot be responsible for"},{"speaker":"Brad Causey","startTime":345.34,"endTime":350.35,"body":"cybersecurity because anything"},{"speaker":"Brad Causey","startTime":350.47,"endTime":354.64,"body":"that is not break fix will take"},{"speaker":"Brad Causey","startTime":350.47,"endTime":354.64,"body":"a back seat to break fix. Right."},{"speaker":"Brad Causey","startTime":354.91,"endTime":359.08,"body":"It's one of the reasons that I"},{"speaker":"Brad Causey","startTime":354.91,"endTime":359.08,"body":"push so hard for our team here"},{"speaker":"Brad Causey","startTime":359.14,"endTime":363.66,"body":"at s3 160 to remain outside of"},{"speaker":"Brad Causey","startTime":359.14,"endTime":363.66,"body":"that operational role is because"},{"speaker":"Brad Causey","startTime":364.26,"endTime":368.28,"body":"anything that is not part of our"},{"speaker":"Brad Causey","startTime":364.26,"endTime":368.28,"body":"day job will suffer when our day"},{"speaker":"Brad Causey","startTime":368.49,"endTime":373.56,"body":"job calls for us to do work, and"},{"speaker":"Brad Causey","startTime":368.49,"endTime":373.56,"body":"that's true for any job. But"},{"speaker":"Brad Causey","startTime":373.59,"endTime":377.91,"body":"it's it's more dangerous for IT"},{"speaker":"Brad Causey","startTime":373.59,"endTime":377.91,"body":"folks who have been tasked with"},{"speaker":"Brad Causey","startTime":377.94,"endTime":381.17,"body":"cybersecurity roles and"},{"speaker":"Brad Causey","startTime":377.94,"endTime":381.17,"body":"responsibilities, and so you"},{"speaker":"Brad Causey","startTime":381.2,"endTime":384.14,"body":"know it's easy for me to sit"},{"speaker":"Brad Causey","startTime":381.2,"endTime":384.14,"body":"over here in my ivory tower and"},{"speaker":"Brad Causey","startTime":384.17,"endTime":386.33,"body":"be like, yeah, just separate the"},{"speaker":"Brad Causey","startTime":384.17,"endTime":386.33,"body":"roles, man. Get a dedicated"},{"speaker":"Brad Causey","startTime":386.39,"endTime":389.15,"body":"cyber guy. That's not always"},{"speaker":"Brad Causey","startTime":386.39,"endTime":389.15,"body":"possible, and I realize that."},{"speaker":"Brad Causey","startTime":389.63,"endTime":392.0,"body":"But I think again, and and I'm"},{"speaker":"Brad Causey","startTime":389.63,"endTime":392.0,"body":"kind of speaking more to"},{"speaker":"Brad Causey","startTime":392.06,"endTime":395.63,"body":"management than I am anything"},{"speaker":"Brad Causey","startTime":392.06,"endTime":395.63,"body":"else. In that you guys have to"},{"speaker":"Brad Causey","startTime":395.72,"endTime":399.8,"body":"understand that break fix takes"},{"speaker":"Brad Causey","startTime":395.72,"endTime":399.8,"body":"priority over everything else."},{"speaker":"Brad Causey","startTime":399.8,"endTime":401.77,"body":"The whole keeping the lights on,"},{"speaker":"Brad Causey","startTime":399.8,"endTime":401.77,"body":"dude. Because if the lights go"},{"speaker":"Brad Causey","startTime":401.92,"endTime":404.68,"body":"out, cyber doesn't really matter"},{"speaker":"Brad Causey","startTime":401.92,"endTime":404.68,"body":"anymore, right? I mean,"},{"speaker":"Brad Causey","startTime":404.74,"endTime":406.99,"body":"technically, you've solved the"},{"speaker":"Brad Causey","startTime":404.74,"endTime":406.99,"body":"cyber problem, but I don't think"},{"speaker":"Brad Causey","startTime":407.02,"endTime":410.38,"body":"that's the direction we're"},{"speaker":"Brad Causey","startTime":407.02,"endTime":410.38,"body":"trying to go with this. But but"},{"speaker":"Brad Causey","startTime":410.41,"endTime":412.66,"body":"you're absolutely right that"},{"speaker":"Brad Causey","startTime":410.41,"endTime":412.66,"body":"leadership doesn't understand."},{"speaker":"Brad Causey","startTime":412.69,"endTime":415.3,"body":"But but I'm I'm going to back up"},{"speaker":"Brad Causey","startTime":412.69,"endTime":415.3,"body":"from that just a second, and and"},{"speaker":"Brad Causey","startTime":415.33,"endTime":418.81,"body":"I want to take a little bit of"},{"speaker":"Brad Causey","startTime":415.33,"endTime":418.81,"body":"the responsibility of that off"},{"speaker":"Brad Causey","startTime":418.9,"endTime":422.52,"body":"of leadership, because if you"},{"speaker":"Brad Causey","startTime":418.9,"endTime":422.52,"body":"are, and I'm talking to you, IT"},{"speaker":"Brad Causey","startTime":422.58,"endTime":426.09,"body":"guys out there that wear 72"},{"speaker":"Brad Causey","startTime":422.58,"endTime":426.09,"body":"different hats, right? You have"},{"speaker":"Brad Causey","startTime":426.15,"endTime":428.7,"body":"to learn how to communicate this"},{"speaker":"Brad Causey","startTime":426.15,"endTime":428.7,"body":"to leadership. Now, if your"},{"speaker":"Brad Causey","startTime":428.76,"endTime":431.07,"body":"leadership doesn't care, and you"},{"speaker":"Brad Causey","startTime":428.76,"endTime":431.07,"body":"have then you have a culture"},{"speaker":"Brad Causey","startTime":431.16,"endTime":433.32,"body":"problem, and and you have a"},{"speaker":"Brad Causey","startTime":431.16,"endTime":433.32,"body":"leadership problem, I can't"},{"speaker":"Brad Causey","startTime":433.38,"endTime":436.92,"body":"solve that on a podcast. But"},{"speaker":"Brad Causey","startTime":433.38,"endTime":436.92,"body":"what I can do is arm you with"},{"speaker":"Brad Causey","startTime":436.92,"endTime":441.02,"body":"the resources and the and the"},{"speaker":"Brad Causey","startTime":436.92,"endTime":441.02,"body":"concept of communicating how"},{"speaker":"Brad Causey","startTime":441.17,"endTime":445.73,"body":"important the effort, money,"},{"speaker":"Brad Causey","startTime":441.17,"endTime":445.73,"body":"time, how those are to"},{"speaker":"Brad Causey","startTime":445.91,"endTime":449.42,"body":"management, so that they"},{"speaker":"Brad Causey","startTime":445.91,"endTime":449.42,"body":"understand that you are"},{"speaker":"Brad Causey","startTime":449.51,"endTime":452.69,"body":"sacrificing security for break"},{"speaker":"Brad Causey","startTime":449.51,"endTime":452.69,"body":"fix. If you are, if someone"},{"speaker":"Brad Causey","startTime":452.78,"endTime":455.15,"body":"shares that role, that's just"},{"speaker":"Brad Causey","startTime":452.78,"endTime":455.15,"body":"the reality of how it works."},{"speaker":"Spencer","startTime":455.899,"endTime":460.179,"body":"Yep, exactly. So, quick"},{"speaker":"Spencer","startTime":455.899,"endTime":460.179,"body":"call to action. Then we're going"},{"speaker":"Spencer","startTime":460.179,"endTime":465.519,"body":"to get into the next section"},{"speaker":"Spencer","startTime":460.179,"endTime":465.519,"body":"here. So, if you are in the"},{"speaker":"Spencer","startTime":465.609,"endTime":468.339,"body":"market for a pen test, if you"},{"speaker":"Spencer","startTime":465.609,"endTime":468.339,"body":"need a pen test, if you need it"},{"speaker":"Spencer","startTime":468.369,"endTime":473.379,"body":"ASAP, or in six months or in 12"},{"speaker":"Spencer","startTime":468.369,"endTime":473.379,"body":"months, we do pen testing. I"},{"speaker":"Spencer","startTime":473.499,"endTime":476.259,"body":"primarily do internal pen"},{"speaker":"Spencer","startTime":473.499,"endTime":476.259,"body":"testing, specifically Windows"},{"speaker":"Spencer","startTime":476.469,"endTime":480.909,"body":"Active Directory, SimBreach,"},{"speaker":"Spencer","startTime":476.469,"endTime":480.909,"body":"Microsoft. That's my jam. We"},{"speaker":"Spencer","startTime":481.029,"endTime":485.159,"body":"have guys like Brad and Jordan"},{"speaker":"Spencer","startTime":481.029,"endTime":485.159,"body":"on our team who are ninjas at"},{"speaker":"Spencer","startTime":485.279,"endTime":490.919,"body":"web and API, external, mobile."},{"speaker":"Spencer","startTime":485.279,"endTime":490.919,"body":"If it's pen testing, we do it"},{"speaker":"Spencer","startTime":491.009,"endTime":494.249,"body":"kind of thing. So if you're in"},{"speaker":"Spencer","startTime":491.009,"endTime":494.249,"body":"the market, if you need a pen"},{"speaker":"Spencer","startTime":494.339,"endTime":500.699,"body":"test, go to secureit360.com, and"},{"speaker":"Spencer","startTime":494.339,"endTime":500.699,"body":"we'd love to chat. And yeah,"},{"speaker":"Spencer","startTime":500.819,"endTime":502.069,"body":"with that, we'll get in the next"},{"speaker":"Spencer","startTime":500.819,"endTime":502.069,"body":"section."},{"speaker":"Brad Causey","startTime":502.37,"endTime":502.79,"body":"Let's do it."},{"speaker":"Spencer","startTime":503.66,"endTime":506.84,"body":"So, why do capable IT"},{"speaker":"Spencer","startTime":503.66,"endTime":506.84,"body":"admins feel like they're"},{"speaker":"Spencer","startTime":506.96,"endTime":510.29,"body":"failing? So, I've I've had the"},{"speaker":"Spencer","startTime":506.96,"endTime":510.29,"body":"same conversation with a number"},{"speaker":"Spencer","startTime":510.29,"endTime":513.35,"body":"of people where they feel like"},{"speaker":"Spencer","startTime":510.29,"endTime":513.35,"body":"they're so behind the curve,"},{"speaker":"Spencer","startTime":514.49,"endTime":516.83,"body":"they can't keep up and they"},{"speaker":"Spencer","startTime":514.49,"endTime":516.83,"body":"can't keep pace with things. So,"},{"speaker":"Spencer","startTime":516.98,"endTime":518.84,"body":"and I think there's a couple"},{"speaker":"Spencer","startTime":516.98,"endTime":518.84,"body":"reasons for that I want to talk"},{"speaker":"Spencer","startTime":518.93,"endTime":519.05,"body":"through."},{"speaker":"Brad Causey","startTime":519.53,"endTime":519.59,"body":"Yeah."},{"speaker":"Spencer","startTime":520.16,"endTime":524.95,"body":"So, there's more to do"},{"speaker":"Spencer","startTime":520.16,"endTime":524.95,"body":"now than ever, right? And this"},{"speaker":"Spencer","startTime":525.04,"endTime":529.06,"body":"ties on like IT, the convergence"},{"speaker":"Spencer","startTime":525.04,"endTime":529.06,"body":"of IT and cybersecurity. It"},{"speaker":"Spencer","startTime":529.36,"endTime":532.6,"body":"feels like there's more to do"},{"speaker":"Spencer","startTime":529.36,"endTime":532.6,"body":"now than ever, right? You have"},{"speaker":"Spencer","startTime":532.69,"endTime":535.96,"body":"guys like me that are like, you"},{"speaker":"Spencer","startTime":532.69,"endTime":535.96,"body":"need EDR and NDR and deception,"},{"speaker":"Spencer","startTime":536.2,"endTime":541.08,"body":"and you need a good MDR or SOC"},{"speaker":"Spencer","startTime":536.2,"endTime":541.08,"body":"provider. Like you need to do"},{"speaker":"Spencer","startTime":541.32,"endTime":544.8,"body":"all of these things, and that's"},{"speaker":"Spencer","startTime":541.32,"endTime":544.8,"body":"great. And like yes, you should"},{"speaker":"Spencer","startTime":544.86,"endTime":548.16,"body":"do all those things, but that"},{"speaker":"Spencer","startTime":544.86,"endTime":548.16,"body":"adds to the the burden. And then"},{"speaker":"Spencer","startTime":548.31,"endTime":551.64,"body":"you need MFA, and you need"},{"speaker":"Spencer","startTime":548.31,"endTime":551.64,"body":"passkeys, and you need to move"},{"speaker":"Spencer","startTime":551.76,"endTime":554.25,"body":"off of passwords, and you got to"},{"speaker":"Spencer","startTime":551.76,"endTime":554.25,"body":"do all this stuff. So there's"},{"speaker":"Spencer","startTime":554.31,"endTime":557.61,"body":"this burden, and there's this"},{"speaker":"Spencer","startTime":554.31,"endTime":557.61,"body":"sense that there's more to do"},{"speaker":"Spencer","startTime":558.36,"endTime":563.6,"body":"now than ever, you know. And the"},{"speaker":"Spencer","startTime":558.36,"endTime":563.6,"body":"other part of this is compliance"},{"speaker":"Spencer","startTime":563.66,"endTime":566.15,"body":"frameworks. Compliance"},{"speaker":"Spencer","startTime":563.66,"endTime":566.15,"body":"frameworks are getting updated."},{"speaker":"Spencer","startTime":566.24,"endTime":570.08,"body":"There's more compliance burden."},{"speaker":"Spencer","startTime":566.24,"endTime":570.08,"body":"There's burden on insurance"},{"speaker":"Spencer","startTime":570.14,"endTime":573.32,"body":"providers or from insurance"},{"speaker":"Spencer","startTime":570.14,"endTime":573.32,"body":"providers, and then finally"},{"speaker":"Spencer","startTime":573.38,"endTime":576.26,"body":"there's burden on clients. So,"},{"speaker":"Spencer","startTime":573.38,"endTime":576.26,"body":"like we work with a lot of law"},{"speaker":"Spencer","startTime":576.41,"endTime":579.65,"body":"firms, a lot of law firms, or a"},{"speaker":"Spencer","startTime":576.41,"endTime":579.65,"body":"lot of their clients are"},{"speaker":"Spencer","startTime":579.71,"endTime":583.75,"body":"demanding or requesting that"},{"speaker":"Spencer","startTime":579.71,"endTime":583.75,"body":"those law firms follow certain"},{"speaker":"Spencer","startTime":583.81,"endTime":587.02,"body":"security standards, which also"},{"speaker":"Spencer","startTime":583.81,"endTime":587.02,"body":"adds burden. It seems like"},{"speaker":"Spencer","startTime":587.08,"endTime":590.65,"body":"there's just a lot that is on"},{"speaker":"Spencer","startTime":587.08,"endTime":590.65,"body":"the IT admin's plate right now"},{"speaker":"Spencer","startTime":590.83,"endTime":592.0,"body":"that is just all converging."},{"speaker":"Brad Causey","startTime":592.48,"endTime":594.46,"body":"Yeah, no, you're"},{"speaker":"Brad Causey","startTime":592.48,"endTime":594.46,"body":"absolutely right, and and and I"},{"speaker":"Brad Causey","startTime":594.52,"endTime":598.42,"body":"would argue that cyber moves,"},{"speaker":"Brad Causey","startTime":594.52,"endTime":598.42,"body":"and and and when I say that, I'm"},{"speaker":"Brad Causey","startTime":598.48,"endTime":602.73,"body":"kind of rolling up. You know,"},{"speaker":"Brad Causey","startTime":598.48,"endTime":602.73,"body":"threat actors. You know all that"},{"speaker":"Brad Causey","startTime":602.76,"endTime":606.87,"body":"good stuff with with compliance"},{"speaker":"Brad Causey","startTime":602.76,"endTime":606.87,"body":"regulatories frameworks and"},{"speaker":"Brad Causey","startTime":606.87,"endTime":608.88,"body":"things. That's kind of rolling"},{"speaker":"Brad Causey","startTime":606.87,"endTime":608.88,"body":"all of that up. But to your"},{"speaker":"Brad Causey","startTime":609.0,"endTime":613.56,"body":"point, first of all, cyber is"},{"speaker":"Brad Causey","startTime":609.0,"endTime":613.56,"body":"like multiple multiple"},{"speaker":"Brad Causey","startTime":613.62,"endTime":616.65,"body":"disciplines. So if you're"},{"speaker":"Brad Causey","startTime":613.62,"endTime":616.65,"body":"wearing that hat and that is"},{"speaker":"Brad Causey","startTime":616.71,"endTime":620.21,"body":"part of your role, you're not"},{"speaker":"Brad Causey","startTime":616.71,"endTime":620.21,"body":"just the patch guy. You know"},{"speaker":"Brad Causey","startTime":620.24,"endTime":623.3,"body":"what I mean? There's so much"},{"speaker":"Brad Causey","startTime":620.24,"endTime":623.3,"body":"more to it than that, but it"},{"speaker":"Brad Causey","startTime":623.48,"endTime":626.69,"body":"moves at a faster pace than"},{"speaker":"Brad Causey","startTime":623.48,"endTime":626.69,"body":"typical IT and systems"},{"speaker":"Brad Causey","startTime":626.75,"endTime":629.57,"body":"administration moves. You know"},{"speaker":"Brad Causey","startTime":626.75,"endTime":629.57,"body":"what? You know you you've got a"},{"speaker":"Brad Causey","startTime":629.63,"endTime":631.88,"body":"you've got a set piece in your"},{"speaker":"Brad Causey","startTime":629.63,"endTime":631.88,"body":"in your network and your"},{"speaker":"Brad Causey","startTime":631.88,"endTime":634.85,"body":"environment within your area of"},{"speaker":"Brad Causey","startTime":631.88,"endTime":634.85,"body":"operation. You understand how"},{"speaker":"Brad Causey","startTime":634.97,"endTime":638.0,"body":"all those different things work,"},{"speaker":"Brad Causey","startTime":634.97,"endTime":638.0,"body":"and and as long as you stay up"},{"speaker":"Brad Causey","startTime":638.06,"endTime":640.42,"body":"on those things, you're going to"},{"speaker":"Brad Causey","startTime":638.06,"endTime":640.42,"body":"be relatively okay from a break"},{"speaker":"Brad Causey","startTime":640.51,"endTime":644.65,"body":"fix perspective, cyber is not"},{"speaker":"Brad Causey","startTime":640.51,"endTime":644.65,"body":"that way, folks, and and it's"},{"speaker":"Brad Causey","startTime":644.68,"endTime":646.93,"body":"important that everybody in the"},{"speaker":"Brad Causey","startTime":644.68,"endTime":646.93,"body":"hierarchy understand that,"},{"speaker":"Brad Causey","startTime":646.93,"endTime":650.83,"body":"including management. And and so"},{"speaker":"Brad Causey","startTime":646.93,"endTime":650.83,"body":"yeah, it moves quick. It dude,"},{"speaker":"Brad Causey","startTime":650.89,"endTime":653.32,"body":"we have trouble keeping up with"},{"speaker":"Brad Causey","startTime":650.89,"endTime":653.32,"body":"it sometimes. You know, we were"},{"speaker":"Brad Causey","startTime":653.35,"endTime":655.57,"body":"just talking about that on the"},{"speaker":"Brad Causey","startTime":653.35,"endTime":655.57,"body":"standup this morning, where it's"},{"speaker":"Brad Causey","startTime":655.63,"endTime":658.9,"body":"just like this stuff moves so"},{"speaker":"Brad Causey","startTime":655.63,"endTime":658.9,"body":"quickly that it's a full time"},{"speaker":"Brad Causey","startTime":659.02,"endTime":663.78,"body":"job for us to just know what the"},{"speaker":"Brad Causey","startTime":659.02,"endTime":663.78,"body":"heck is going on, and and I"},{"speaker":"Brad Causey","startTime":663.87,"endTime":667.29,"body":"can't imagine trying to do that"},{"speaker":"Brad Causey","startTime":663.87,"endTime":667.29,"body":"and work a you know 70 hour a"},{"speaker":"Brad Causey","startTime":667.38,"endTime":672.36,"body":"week you know operational role."},{"speaker":"Brad Causey","startTime":667.38,"endTime":672.36,"body":"So so yeah, dude, it's it is an"},{"speaker":"Brad Causey","startTime":672.42,"endTime":675.78,"body":"entirely different discipline,"},{"speaker":"Brad Causey","startTime":672.42,"endTime":675.78,"body":"and and it's not just about"},{"speaker":"Brad Causey","startTime":675.93,"endTime":679.14,"body":"time. It's also about the time"},{"speaker":"Brad Causey","startTime":675.93,"endTime":679.14,"body":"that it takes to build up the"},{"speaker":"Brad Causey","startTime":679.26,"endTime":682.64,"body":"expertise and the knowledge to"},{"speaker":"Brad Causey","startTime":679.26,"endTime":682.64,"body":"even interpret the changes that"},{"speaker":"Brad Causey","startTime":682.73,"endTime":686.15,"body":"are occurring in cyber to begin"},{"speaker":"Brad Causey","startTime":682.73,"endTime":686.15,"body":"with, which is a huge lift all"},{"speaker":"Brad Causey","startTime":686.21,"endTime":686.66,"body":"on its own."},{"speaker":"Spencer","startTime":687.26,"endTime":689.09,"body":"Yeah, and we're going"},{"speaker":"Spencer","startTime":687.26,"endTime":689.09,"body":"to talk about some of the"},{"speaker":"Spencer","startTime":689.18,"endTime":692.15,"body":"solutions or some ideas for kind"},{"speaker":"Spencer","startTime":689.18,"endTime":692.15,"body":"of tackling this stuff here in a"},{"speaker":"Spencer","startTime":692.18,"endTime":694.97,"body":"minute. But I do think it's"},{"speaker":"Spencer","startTime":692.18,"endTime":694.97,"body":"important to kind of identify"},{"speaker":"Spencer","startTime":695.21,"endTime":699.11,"body":"what some of these problems are,"},{"speaker":"Spencer","startTime":695.21,"endTime":699.11,"body":"what some of these concerns are,"},{"speaker":"Spencer","startTime":699.26,"endTime":702.88,"body":"frustrations are, and some of"},{"speaker":"Spencer","startTime":699.26,"endTime":702.88,"body":"the reasons for the sense of"},{"speaker":"Spencer","startTime":702.91,"endTime":706.18,"body":"burnout, the sense of like"},{"speaker":"Spencer","startTime":702.91,"endTime":706.18,"body":"there's so much to do, and"},{"speaker":"Spencer","startTime":706.39,"endTime":710.32,"body":"another reason I think is"},{"speaker":"Spencer","startTime":706.39,"endTime":710.32,"body":"because vulnerability discovery"},{"speaker":"Spencer","startTime":710.77,"endTime":713.17,"body":"is at a nuclear all-time high."},{"speaker":"Brad Causey","startTime":713.47,"endTime":714.94,"body":"Oh my god, it's not"},{"speaker":"Brad Causey","startTime":713.47,"endTime":714.94,"body":"going to get any better, bro."},{"speaker":"Spencer","startTime":716.11,"endTime":718.21,"body":"All-time high, and"},{"speaker":"Spencer","startTime":716.11,"endTime":718.21,"body":"we're talking, you know,"},{"speaker":"Spencer","startTime":718.36,"endTime":721.05,"body":"Microsoft went from having I"},{"speaker":"Spencer","startTime":718.36,"endTime":721.05,"body":"don't know, I forget the exact"},{"speaker":"Spencer","startTime":721.05,"endTime":724.62,"body":"specifics, so forgive me. But"},{"speaker":"Spencer","startTime":721.05,"endTime":724.62,"body":"like, let's say like 90 patches"},{"speaker":"Spencer","startTime":725.34,"endTime":728.49,"body":"in in a patch Tuesday to like"},{"speaker":"Spencer","startTime":725.34,"endTime":728.49,"body":"500."},{"speaker":"Brad Causey","startTime":729.06,"endTime":729.12,"body":"Yeah,"},{"speaker":"Spencer","startTime":729.3,"endTime":734.22,"body":"you know, like 7070 to"},{"speaker":"Spencer","startTime":729.3,"endTime":734.22,"body":"70 to 100 to 500 or more in a"},{"speaker":"Spencer","startTime":734.28,"endTime":734.94,"body":"patch Tuesday."},{"speaker":"Brad Causey","startTime":735.66,"endTime":738.69,"body":"So in in the mid"},{"speaker":"Brad Causey","startTime":735.66,"endTime":738.69,"body":"2000s, in the 20, I just googled"},{"speaker":"Brad Causey","startTime":738.75,"endTime":745.25,"body":"it. In the in in the 2010s, we"},{"speaker":"Brad Causey","startTime":738.75,"endTime":745.25,"body":"were averaging a dozen. July of"},{"speaker":"Brad Causey","startTime":745.64,"endTime":751.46,"body":"2026, there were 622 CVEs. That"},{"speaker":"Brad Causey","startTime":745.64,"endTime":751.46,"body":"that's like I don't even know if"},{"speaker":"Brad Causey","startTime":751.58,"endTime":754.13,"body":"what what order of and that's"},{"speaker":"Brad Causey","startTime":751.58,"endTime":754.13,"body":"just Microsoft,"},{"speaker":"Spencer","startTime":754.25,"endTime":754.34,"body":"right?"},{"speaker":"Brad Causey","startTime":754.669,"endTime":755.959,"body":"Just one vendor,"},{"speaker":"Brad Causey","startTime":754.669,"endTime":755.959,"body":"folks."},{"speaker":"Spencer","startTime":756.17,"endTime":756.23,"body":"Yeah."},{"speaker":"Brad Causey","startTime":756.89,"endTime":758.66,"body":"Holy smokes, I"},{"speaker":"Brad Causey","startTime":756.89,"endTime":758.66,"body":"didn't realize it was that high."},{"speaker":"Brad Causey","startTime":758.81,"endTime":759.59,"body":"That's insane."},{"speaker":"Spencer","startTime":760.04,"endTime":763.9,"body":"Yeah. And so what's"},{"speaker":"Spencer","startTime":760.04,"endTime":763.9,"body":"happening is we are having these"},{"speaker":"Spencer","startTime":764.08,"endTime":770.56,"body":"AI agents and bug bounty"},{"speaker":"Spencer","startTime":764.08,"endTime":770.56,"body":"researchers, you know, security"},{"speaker":"Spencer","startTime":770.68,"endTime":774.19,"body":"researchers. They're all looking"},{"speaker":"Spencer","startTime":770.68,"endTime":774.19,"body":"for vulnerabilities. They're all"},{"speaker":"Spencer","startTime":774.34,"endTime":778.72,"body":"CVE hunting essentially, and in"},{"speaker":"Spencer","startTime":774.34,"endTime":778.72,"body":"many ways, that's optimizing for"},{"speaker":"Spencer","startTime":778.75,"endTime":781.41,"body":"a problem that attackers never"},{"speaker":"Spencer","startTime":778.75,"endTime":781.41,"body":"had. Like there was no shortage"},{"speaker":"Spencer","startTime":781.5,"endTime":786.66,"body":"of vulnerabilities to exploit,"},{"speaker":"Spencer","startTime":781.5,"endTime":786.66,"body":"but the point of I'm trying to"},{"speaker":"Spencer","startTime":786.69,"endTime":789.75,"body":"make here is like there's the"},{"speaker":"Spencer","startTime":786.69,"endTime":789.75,"body":"sense that because there's all"},{"speaker":"Spencer","startTime":789.78,"endTime":794.19,"body":"these vulnerabilities, there's"},{"speaker":"Spencer","startTime":789.78,"endTime":794.19,"body":"more to do. When in in fact, 99"},{"speaker":"Spencer","startTime":794.91,"endTime":796.62,"body":"of these vulnerabilities will"},{"speaker":"Spencer","startTime":794.91,"endTime":796.62,"body":"never matter to your"},{"speaker":"Spencer","startTime":796.68,"endTime":799.86,"body":"organization at all, and they'll"},{"speaker":"Spencer","startTime":796.68,"endTime":799.86,"body":"never matter, right? It's the"},{"speaker":"Spencer","startTime":799.98,"endTime":803.27,"body":"movie. It's it's the solar"},{"speaker":"Spencer","startTime":799.98,"endTime":803.27,"body":"winds. It's like it's the big"},{"speaker":"Spencer","startTime":803.39,"endTime":807.35,"body":"ones, and you don't know what"},{"speaker":"Spencer","startTime":803.39,"endTime":807.35,"body":"the 1% are. But 99% of these are"},{"speaker":"Spencer","startTime":807.41,"endTime":812.0,"body":"not going to matter at all. But"},{"speaker":"Spencer","startTime":807.41,"endTime":812.0,"body":"there's this huge movement for"},{"speaker":"Spencer","startTime":812.15,"endTime":815.48,"body":"finding vulnerabilities, and"},{"speaker":"Spencer","startTime":812.15,"endTime":815.48,"body":"there's this this emphasis on"},{"speaker":"Spencer","startTime":815.54,"endTime":820.42,"body":"this by AI labs and by some of"},{"speaker":"Spencer","startTime":815.54,"endTime":820.42,"body":"the big vendors that are only"},{"speaker":"Spencer","startTime":820.48,"endTime":823.69,"body":"focused on vulnerabilities, so"},{"speaker":"Spencer","startTime":820.48,"endTime":823.69,"body":"it just feels like you run a"},{"speaker":"Spencer","startTime":823.72,"endTime":826.87,"body":"Nessus scan and you have, you"},{"speaker":"Spencer","startTime":823.72,"endTime":826.87,"body":"know, five times as many"},{"speaker":"Spencer","startTime":827.23,"endTime":830.11,"body":"vulnerabilities. You're like,"},{"speaker":"Spencer","startTime":827.23,"endTime":830.11,"body":"what's going on? I thought I was"},{"speaker":"Spencer","startTime":830.23,"endTime":832.87,"body":"getting thought I was going"},{"speaker":"Spencer","startTime":830.23,"endTime":832.87,"body":"down, and it's just going up and"},{"speaker":"Spencer","startTime":832.9,"endTime":836.89,"body":"up and up. So it seems like an"},{"speaker":"Spencer","startTime":832.9,"endTime":836.89,"body":"insurmountable task, but"},{"speaker":"Spencer","startTime":837.31,"endTime":840.13,"body":"actually, I think it's it's a"},{"speaker":"Spencer","startTime":837.31,"endTime":840.13,"body":"focus on a wrong thing, which as"},{"speaker":"Spencer","startTime":840.19,"endTime":842.85,"body":"a conversation for another day,"},{"speaker":"Spencer","startTime":840.19,"endTime":842.85,"body":"but I think that's part of this"},{"speaker":"Spencer","startTime":843.54,"endTime":846.12,"body":"sense that IT teams feel like"},{"speaker":"Spencer","startTime":843.54,"endTime":846.12,"body":"they're kind of drowning or"},{"speaker":"Spencer","startTime":846.21,"endTime":847.02,"body":"failing a bit."},{"speaker":"Brad Causey","startTime":847.56,"endTime":849.57,"body":"No, they do. They"},{"speaker":"Brad Causey","startTime":847.56,"endTime":849.57,"body":"do. And and and what frustrates"},{"speaker":"Brad Causey","startTime":849.6,"endTime":851.79,"body":"me the most about all of this is"},{"speaker":"Brad Causey","startTime":849.6,"endTime":851.79,"body":"none of these CVE, like you"},{"speaker":"Brad Causey","startTime":851.88,"endTime":854.73,"body":"said, none of them matter, dude."},{"speaker":"Brad Causey","startTime":851.88,"endTime":854.73,"body":"It's it's not the CVEs that"},{"speaker":"Brad Causey","startTime":854.79,"endTime":858.33,"body":"we're that we're using to gain"},{"speaker":"Brad Causey","startTime":854.79,"endTime":858.33,"body":"you know initial access. It's"},{"speaker":"Brad Causey","startTime":858.39,"endTime":861.2,"body":"not the CVEs that we're using"},{"speaker":"Brad Causey","startTime":858.39,"endTime":861.2,"body":"for lateral movement. You know,"},{"speaker":"Brad Causey","startTime":861.47,"endTime":865.52,"body":"and and so this this influx"},{"speaker":"Brad Causey","startTime":861.47,"endTime":865.52,"body":"explosion of known"},{"speaker":"Brad Causey","startTime":865.58,"endTime":869.06,"body":"vulnerabilities has no material"},{"speaker":"Brad Causey","startTime":865.58,"endTime":869.06,"body":"impact on these organizations,"},{"speaker":"Brad Causey","startTime":869.21,"endTime":872.93,"body":"right? It's just noise, and it's"},{"speaker":"Brad Causey","startTime":869.21,"endTime":872.93,"body":"a lot of noise. But I also"},{"speaker":"Brad Causey","startTime":873.26,"endTime":875.27,"body":"understand, and I and I"},{"speaker":"Brad Causey","startTime":873.26,"endTime":875.27,"body":"empathize with these people"},{"speaker":"Brad Causey","startTime":875.9,"endTime":879.74,"body":"because you can't just ignore"},{"speaker":"Brad Causey","startTime":875.9,"endTime":879.74,"body":"it, right? I mean, go go look at"},{"speaker":"Brad Causey","startTime":879.83,"endTime":883.24,"body":"any regulatory framework out"},{"speaker":"Brad Causey","startTime":879.83,"endTime":883.24,"body":"there, and you know, patch and"},{"speaker":"Brad Causey","startTime":883.24,"endTime":885.85,"body":"vulnerability management is a"},{"speaker":"Brad Causey","startTime":883.24,"endTime":885.85,"body":"core tenet of those things. So,"},{"speaker":"Brad Causey","startTime":885.94,"endTime":889.69,"body":"like, I understand why people"},{"speaker":"Brad Causey","startTime":885.94,"endTime":889.69,"body":"are freaking out a little bit. I"},{"speaker":"Brad Causey","startTime":889.78,"endTime":890.65,"body":"get that. Yeah."},{"speaker":"Spencer","startTime":892.27,"endTime":895.93,"body":"So, I want to propose"},{"speaker":"Spencer","startTime":892.27,"endTime":895.93,"body":"some ideas to to help tackle"},{"speaker":"Spencer","startTime":895.99,"endTime":901.59,"body":"this and to help handle and and"},{"speaker":"Spencer","startTime":895.99,"endTime":901.59,"body":"battle this. I've put together"},{"speaker":"Spencer","startTime":901.71,"endTime":905.1,"body":"kind of like a simple framework"},{"speaker":"Spencer","startTime":901.71,"endTime":905.1,"body":"that I think makes sense, and"},{"speaker":"Spencer","startTime":905.22,"endTime":910.65,"body":"then I want to talk about how to"},{"speaker":"Spencer","startTime":905.22,"endTime":910.65,"body":"push back maybe on some of these"},{"speaker":"Spencer","startTime":910.77,"endTime":913.8,"body":"things, like push back against"},{"speaker":"Spencer","startTime":910.77,"endTime":913.8,"body":"leadership, push back against"},{"speaker":"Spencer","startTime":915.0,"endTime":916.89,"body":"some of the changes that are"},{"speaker":"Spencer","startTime":915.0,"endTime":916.89,"body":"happening in IT and"},{"speaker":"Spencer","startTime":916.92,"endTime":921.35,"body":"cybersecurity, without being"},{"speaker":"Spencer","startTime":916.92,"endTime":921.35,"body":"seen as uncooperative or like"},{"speaker":"Spencer","startTime":921.56,"endTime":924.74,"body":"you know difficult to to deal"},{"speaker":"Spencer","startTime":921.56,"endTime":924.74,"body":"with and sure and that kind of"},{"speaker":"Spencer","startTime":924.77,"endTime":928.82,"body":"thing and we'll talk a little"},{"speaker":"Spencer","startTime":924.77,"endTime":928.82,"body":"bit about like what we think"},{"speaker":"Spencer","startTime":930.26,"endTime":933.44,"body":"what IT teams need to be"},{"speaker":"Spencer","startTime":930.26,"endTime":933.44,"body":"successful like yeah if you're"},{"speaker":"Spencer","startTime":933.56,"endTime":937.46,"body":"an IT manager an IT director a"},{"speaker":"Spencer","startTime":933.56,"endTime":937.46,"body":"CIO CISO what do you need to do"},{"speaker":"Spencer","startTime":937.73,"endTime":941.32,"body":"to arm your team to be"},{"speaker":"Spencer","startTime":937.73,"endTime":941.32,"body":"successful so we'll talk about"},{"speaker":"Spencer","startTime":941.35,"endTime":945.67,"body":"that at the end. So, simple"},{"speaker":"Spencer","startTime":941.35,"endTime":945.67,"body":"prioritization framework, and I"},{"speaker":"Spencer","startTime":945.76,"endTime":948.55,"body":"say simple like I don't I don't"},{"speaker":"Spencer","startTime":945.76,"endTime":948.55,"body":"think any of this is simple."},{"speaker":"Spencer","startTime":949.63,"endTime":951.97,"body":"Like the the the ideas are"},{"speaker":"Spencer","startTime":949.63,"endTime":951.97,"body":"simple, right? But like the"},{"speaker":"Spencer","startTime":952.12,"endTime":954.31,"body":"implementation of it and"},{"speaker":"Spencer","startTime":952.12,"endTime":954.31,"body":"actually doing these things is"},{"speaker":"Spencer","startTime":954.49,"endTime":958.66,"body":"is quite difficult. So I think"},{"speaker":"Spencer","startTime":954.49,"endTime":958.66,"body":"of this I think of it like this,"},{"speaker":"Spencer","startTime":959.02,"endTime":962.55,"body":"and I'm curious your comments,"},{"speaker":"Spencer","startTime":959.02,"endTime":962.55,"body":"Brad. So I think of harm,"},{"speaker":"Spencer","startTime":963.21,"endTime":967.74,"body":"likelihood, improve or"},{"speaker":"Spencer","startTime":963.21,"endTime":967.74,"body":"improvement, and acceptance. So"},{"speaker":"Spencer","startTime":968.88,"endTime":973.02,"body":"this is kind of how I would"},{"speaker":"Spencer","startTime":968.88,"endTime":973.02,"body":"prioritize vulnerabilities or"},{"speaker":"Spencer","startTime":973.17,"endTime":977.79,"body":"risk to my organization, right?"},{"speaker":"Spencer","startTime":973.17,"endTime":977.79,"body":"So first is harm. What what"},{"speaker":"Spencer","startTime":978.15,"endTime":981.23,"body":"could cause the greatest harm to"},{"speaker":"Spencer","startTime":978.15,"endTime":981.23,"body":"the organization, to the"},{"speaker":"Spencer","startTime":981.32,"endTime":985.01,"body":"business, what are the things"},{"speaker":"Spencer","startTime":981.32,"endTime":985.01,"body":"that are kind of the existential"},{"speaker":"Spencer","startTime":985.07,"endTime":987.35,"body":"threats? Like, what could cause"},{"speaker":"Spencer","startTime":985.07,"endTime":987.35,"body":"harm the most?"},{"speaker":"Unknown","startTime":987.92,"endTime":987.95,"body":"The"},{"speaker":"Spencer","startTime":988.49,"endTime":991.46,"body":"next is what's most"},{"speaker":"Spencer","startTime":988.49,"endTime":991.46,"body":"likely to be attacked, or"},{"speaker":"Spencer","startTime":991.58,"endTime":995.6,"body":"exploited, or abused. This is"},{"speaker":"Spencer","startTime":991.58,"endTime":995.6,"body":"likelihood, right? Like, what"},{"speaker":"Spencer","startTime":996.26,"endTime":1000.6,"body":"have we found is the most"},{"speaker":"Spencer","startTime":996.26,"endTime":1000.6,"body":"acceptable to these attacks or"},{"speaker":"Spencer","startTime":1000.72,"endTime":1003.6,"body":"these vulnerabilities. Next is"},{"speaker":"Spencer","startTime":1000.72,"endTime":1003.6,"body":"improvement. What can we"},{"speaker":"Spencer","startTime":1003.78,"endTime":1008.16,"body":"realistically improve with the"},{"speaker":"Spencer","startTime":1003.78,"endTime":1008.16,"body":"resources that we have? Right,"},{"speaker":"Spencer","startTime":1008.19,"endTime":1011.07,"body":"like we can't pull a rabbit out"},{"speaker":"Spencer","startTime":1008.19,"endTime":1011.07,"body":"of a hat, but with the tools,"},{"speaker":"Spencer","startTime":1011.28,"endTime":1015.18,"body":"with the team, with the money,"},{"speaker":"Spencer","startTime":1011.28,"endTime":1015.18,"body":"with the resources we have, what"},{"speaker":"Spencer","startTime":1015.54,"endTime":1018.87,"body":"can we realistically improve?"},{"speaker":"Spencer","startTime":1015.54,"endTime":1018.87,"body":"And then the fourth thing is"},{"speaker":"Spencer","startTime":1018.87,"endTime":1023.72,"body":"accept. Like what risks are we"},{"speaker":"Spencer","startTime":1018.87,"endTime":1023.72,"body":"just willing to accept because"},{"speaker":"Spencer","startTime":1024.68,"endTime":1029.21,"body":"the team can't address it? It's"},{"speaker":"Spencer","startTime":1024.68,"endTime":1029.21,"body":"not high likelihood. It's not"},{"speaker":"Spencer","startTime":1029.99,"endTime":1033.26,"body":"high impact. It's not going to."},{"speaker":"Spencer","startTime":1029.99,"endTime":1033.26,"body":"You know, we don't expect it to"},{"speaker":"Spencer","startTime":1033.29,"endTime":1036.38,"body":"cause a high amount of harm. So"},{"speaker":"Spencer","startTime":1033.29,"endTime":1036.38,"body":"this is my kind of like mental"},{"speaker":"Spencer","startTime":1036.47,"endTime":1040.01,"body":"model for thinking through some"},{"speaker":"Spencer","startTime":1036.47,"endTime":1040.01,"body":"of this. So I'm curious, Brad,"},{"speaker":"Spencer","startTime":1040.19,"endTime":1042.13,"body":"thoughts on these these four"},{"speaker":"Spencer","startTime":1040.19,"endTime":1042.13,"body":"things?"},{"speaker":"Brad Causey","startTime":1042.819,"endTime":1044.919,"body":"No, I think it's"},{"speaker":"Brad Causey","startTime":1042.819,"endTime":1044.919,"body":"absolutely perfect, right? So"},{"speaker":"Brad Causey","startTime":1045.399,"endTime":1049.929,"body":"you know, let let's just start"},{"speaker":"Brad Causey","startTime":1045.399,"endTime":1049.929,"body":"with a realistic view of what"},{"speaker":"Brad Causey","startTime":1049.959,"endTime":1053.589,"body":"we're scared of, and you know,"},{"speaker":"Brad Causey","startTime":1049.959,"endTime":1053.589,"body":"I'm I like to, and and actually,"},{"speaker":"Brad Causey","startTime":1053.649,"endTime":1056.619,"body":"I stole this from you. I work"},{"speaker":"Brad Causey","startTime":1053.649,"endTime":1056.619,"body":"backwards from my crown jewels,"},{"speaker":"Brad Causey","startTime":1057.279,"endTime":1060.299,"body":"right? So, what market vertical"},{"speaker":"Brad Causey","startTime":1057.279,"endTime":1060.299,"body":"am I in, right? If I'm a law"},{"speaker":"Brad Causey","startTime":1060.479,"endTime":1063.119,"body":"firm, I care a lot about my"},{"speaker":"Brad Causey","startTime":1060.479,"endTime":1063.119,"body":"documentation, right? I care a"},{"speaker":"Brad Causey","startTime":1063.209,"endTime":1065.909,"body":"lot about the cases that I'm"},{"speaker":"Brad Causey","startTime":1063.209,"endTime":1065.909,"body":"working on, matters, numbers,"},{"speaker":"Brad Causey","startTime":1065.969,"endTime":1068.039,"body":"things like that. You know, if"},{"speaker":"Brad Causey","startTime":1065.969,"endTime":1068.039,"body":"I'm a bank, it's going to be"},{"speaker":"Brad Causey","startTime":1068.159,"endTime":1072.509,"body":"financial and client data, and"},{"speaker":"Brad Causey","startTime":1068.159,"endTime":1072.509,"body":"and and from that, I'm just"},{"speaker":"Brad Causey","startTime":1072.509,"endTime":1074.399,"body":"going to start drawing lines."},{"speaker":"Brad Causey","startTime":1072.509,"endTime":1074.399,"body":"You know, like the meme of the"},{"speaker":"Brad Causey","startTime":1074.459,"endTime":1077.099,"body":"dude smoking a cigarette,"},{"speaker":"Brad Causey","startTime":1074.459,"endTime":1077.099,"body":"pointing at the at the board"},{"speaker":"Brad Causey","startTime":1077.189,"endTime":1079.349,"body":"with all the sticky notes on it."},{"speaker":"Brad Causey","startTime":1077.189,"endTime":1079.349,"body":"Like that's what I'm going to"},{"speaker":"Brad Causey","startTime":1079.349,"endTime":1081.529,"body":"do, right? And and I'm just"},{"speaker":"Brad Causey","startTime":1079.349,"endTime":1081.529,"body":"going to do a very short"},{"speaker":"Brad Causey","startTime":1081.589,"endTime":1085.789,"body":"exercise to identify what things"},{"speaker":"Brad Causey","startTime":1081.589,"endTime":1085.789,"body":"connect to the crown jewels, and"},{"speaker":"Brad Causey","startTime":1085.789,"endTime":1088.639,"body":"then from there I'm going to"},{"speaker":"Brad Causey","startTime":1085.789,"endTime":1088.639,"body":"say, okay, anything hits these"},{"speaker":"Brad Causey","startTime":1088.819,"endTime":1091.459,"body":"components within my IT"},{"speaker":"Brad Causey","startTime":1088.819,"endTime":1091.459,"body":"infrastructure, I care. I care"},{"speaker":"Brad Causey","startTime":1091.489,"endTime":1094.999,"body":"about that, right? And and so"},{"speaker":"Brad Causey","startTime":1091.489,"endTime":1094.999,"body":"yeah, and then we start moving"},{"speaker":"Brad Causey","startTime":1094.999,"endTime":1099.979,"body":"to likelihood. You know, we we"},{"speaker":"Brad Causey","startTime":1094.999,"endTime":1099.979,"body":"we've seen scenarios in like"},{"speaker":"Brad Causey","startTime":1100.069,"endTime":1102.639,"body":"payment processing organizations"},{"speaker":"Brad Causey","startTime":1100.069,"endTime":1102.639,"body":"that we worked with in the past,"},{"speaker":"Brad Causey","startTime":1103.239,"endTime":1107.919,"body":"and and for for all of their"},{"speaker":"Brad Causey","startTime":1103.239,"endTime":1107.919,"body":"faults, they are centric on"},{"speaker":"Brad Causey","startTime":1107.979,"endTime":1111.129,"body":"their core, their their data"},{"speaker":"Brad Causey","startTime":1107.979,"endTime":1111.129,"body":"processing, right? Because they"},{"speaker":"Brad Causey","startTime":1111.159,"endTime":1113.439,"body":"understand where the crown"},{"speaker":"Brad Causey","startTime":1111.159,"endTime":1113.439,"body":"jewels are. If that goes down,"},{"speaker":"Brad Causey","startTime":1113.469,"endTime":1116.319,"body":"the company doesn't exist"},{"speaker":"Brad Causey","startTime":1113.469,"endTime":1116.319,"body":"anymore, and and so the"},{"speaker":"Brad Causey","startTime":1116.619,"endTime":1118.599,"body":"likelihood of something like"},{"speaker":"Brad Causey","startTime":1116.619,"endTime":1118.599,"body":"that being attacked directly is"},{"speaker":"Brad Causey","startTime":1118.659,"endTime":1122.129,"body":"relatively low if it's segmented"},{"speaker":"Brad Causey","startTime":1118.659,"endTime":1122.129,"body":"well. So I say all of that to"},{"speaker":"Brad Causey","startTime":1122.219,"endTime":1125.879,"body":"say take a pragmatic approach,"},{"speaker":"Brad Causey","startTime":1122.219,"endTime":1125.879,"body":"identify what things matter to"},{"speaker":"Brad Causey","startTime":1125.969,"endTime":1129.659,"body":"you, and then work backwards"},{"speaker":"Brad Causey","startTime":1125.969,"endTime":1129.659,"body":"from that. And and and so you"},{"speaker":"Brad Causey","startTime":1129.689,"endTime":1133.019,"body":"know, and following these steps,"},{"speaker":"Brad Causey","startTime":1129.689,"endTime":1133.019,"body":"like we've already identified"},{"speaker":"Brad Causey","startTime":1133.049,"endTime":1134.909,"body":"what would cause the the"},{"speaker":"Brad Causey","startTime":1133.049,"endTime":1134.909,"body":"business the greatest amount of"},{"speaker":"Brad Causey","startTime":1134.909,"endTime":1138.449,"body":"harm, which is if one of these"},{"speaker":"Brad Causey","startTime":1134.909,"endTime":1138.449,"body":"systems gets hit, and then you"},{"speaker":"Brad Causey","startTime":1138.449,"endTime":1141.619,"body":"know what does likelihood of"},{"speaker":"Brad Causey","startTime":1138.449,"endTime":1141.619,"body":"attack mean? Well, it just means"},{"speaker":"Brad Causey","startTime":1141.739,"endTime":1145.219,"body":"like we we all kind of know, or"},{"speaker":"Brad Causey","startTime":1141.739,"endTime":1145.219,"body":"we can look up relatively easily"},{"speaker":"Brad Causey","startTime":1145.639,"endTime":1149.509,"body":"what the most common attack"},{"speaker":"Brad Causey","startTime":1145.639,"endTime":1149.509,"body":"paths are today, you know, and"},{"speaker":"Brad Causey","startTime":1149.599,"endTime":1152.149,"body":"and then work from there, right?"},{"speaker":"Brad Causey","startTime":1149.599,"endTime":1152.149,"body":"And and by the way, I want to I"},{"speaker":"Brad Causey","startTime":1152.209,"endTime":1156.019,"body":"want to throw back to last"},{"speaker":"Brad Causey","startTime":1152.209,"endTime":1156.019,"body":"week's episode, the the improve"},{"speaker":"Brad Causey","startTime":1156.469,"endTime":1159.349,"body":"maybe improving is just turning"},{"speaker":"Brad Causey","startTime":1156.469,"endTime":1159.349,"body":"stuff off that we don't need."},{"speaker":"Brad Causey","startTime":1159.889,"endTime":1162.219,"body":"Maybe we're ripping out some"},{"speaker":"Brad Causey","startTime":1159.889,"endTime":1162.219,"body":"attack surface components,"},{"speaker":"Brad Causey","startTime":1162.849,"endTime":1167.259,"body":"right? That's a win across the"},{"speaker":"Brad Causey","startTime":1162.849,"endTime":1167.259,"body":"board. So, so keep a keen eye"},{"speaker":"Brad Causey","startTime":1167.469,"endTime":1169.659,"body":"out for that. If you missed last"},{"speaker":"Brad Causey","startTime":1167.469,"endTime":1169.659,"body":"week's episode, I encourage you"},{"speaker":"Brad Causey","startTime":1169.659,"endTime":1172.359,"body":"to go back and listen to it"},{"speaker":"Brad Causey","startTime":1169.659,"endTime":1172.359,"body":"because I think it's a really"},{"speaker":"Brad Causey","startTime":1172.479,"endTime":1174.579,"body":"good formula to help you with"},{"speaker":"Brad Causey","startTime":1172.479,"endTime":1174.579,"body":"what we're talking about this"},{"speaker":"Brad Causey","startTime":1174.669,"endTime":1177.999,"body":"week. So, and then the last"},{"speaker":"Brad Causey","startTime":1174.669,"endTime":1177.999,"body":"thing I will say is about"},{"speaker":"Brad Causey","startTime":1178.029,"endTime":1182.879,"body":"accepting risk. I find that"},{"speaker":"Brad Causey","startTime":1178.029,"endTime":1182.879,"body":"executives and management are"},{"speaker":"Brad Causey","startTime":1183.119,"endTime":1186.119,"body":"too shy about accepting risk,"},{"speaker":"Brad Causey","startTime":1183.119,"endTime":1186.119,"body":"right? And I understand why,"},{"speaker":"Brad Causey","startTime":1186.419,"endTime":1189.629,"body":"right? If you accept it, you own"},{"speaker":"Brad Causey","startTime":1186.419,"endTime":1189.629,"body":"it, right? But you are accepting"},{"speaker":"Brad Causey","startTime":1189.719,"endTime":1192.569,"body":"risk every single day. You get"},{"speaker":"Brad Causey","startTime":1189.719,"endTime":1192.569,"body":"in your car, you drive to work,"},{"speaker":"Brad Causey","startTime":1192.599,"endTime":1194.819,"body":"you're accepting that you could"},{"speaker":"Brad Causey","startTime":1192.599,"endTime":1194.819,"body":"get into a car accident and be"},{"speaker":"Brad Causey","startTime":1194.879,"endTime":1198.689,"body":"seriously injured every day that"},{"speaker":"Brad Causey","startTime":1194.879,"endTime":1198.689,"body":"your systems are online. You are"},{"speaker":"Brad Causey","startTime":1198.719,"endTime":1203.539,"body":"accepting risk, so. So don't shy"},{"speaker":"Brad Causey","startTime":1198.719,"endTime":1203.539,"body":"away from that. Understand it,"},{"speaker":"Brad Causey","startTime":1203.629,"endTime":1207.469,"body":"and and and when I say that, and"},{"speaker":"Brad Causey","startTime":1203.629,"endTime":1207.469,"body":"you get into as as management"},{"speaker":"Brad Causey","startTime":1207.499,"endTime":1210.889,"body":"and as executive leadership, you"},{"speaker":"Brad Causey","startTime":1207.499,"endTime":1210.889,"body":"get into understanding what"},{"speaker":"Brad Causey","startTime":1210.919,"endTime":1214.639,"body":"acceptance of risk means. You're"},{"speaker":"Brad Causey","startTime":1210.919,"endTime":1214.639,"body":"going to be a lot more apt to"},{"speaker":"Brad Causey","startTime":1214.699,"endTime":1217.219,"body":"make intelligent decisions that"},{"speaker":"Brad Causey","startTime":1214.699,"endTime":1217.219,"body":"are. It's going to take a lot of"},{"speaker":"Brad Causey","startTime":1217.339,"endTime":1220.569,"body":"load off of staff and the people"},{"speaker":"Brad Causey","startTime":1217.339,"endTime":1220.569,"body":"that are keeping your business"},{"speaker":"Brad Causey","startTime":1220.749,"endTime":1225.099,"body":"running if you become skilled at"},{"speaker":"Brad Causey","startTime":1220.749,"endTime":1225.099,"body":"understanding when to accept"},{"speaker":"Brad Causey","startTime":1225.159,"endTime":1228.429,"body":"risk, you know. And and and I"},{"speaker":"Brad Causey","startTime":1225.159,"endTime":1228.429,"body":"realize I'm probably going"},{"speaker":"Brad Causey","startTime":1228.459,"endTime":1230.979,"body":"against the grain a little bit"},{"speaker":"Brad Causey","startTime":1228.459,"endTime":1230.979,"body":"here by encouraging people to"},{"speaker":"Brad Causey","startTime":1231.099,"endTime":1234.429,"body":"accept risk. That's just a"},{"speaker":"Brad Causey","startTime":1231.099,"endTime":1234.429,"body":"reality that we live in because"},{"speaker":"Brad Causey","startTime":1234.519,"endTime":1236.649,"body":"of all the things we talked"},{"speaker":"Brad Causey","startTime":1234.519,"endTime":1236.649,"body":"about for the last 20 minutes."},{"speaker":"Brad Causey","startTime":1237.309,"endTime":1238.389,"body":"You can't keep up with it, man."},{"speaker":"Spencer","startTime":1239.26,"endTime":1241.89,"body":"Yeah, I mean the best"},{"speaker":"Spencer","startTime":1239.26,"endTime":1241.89,"body":"the security teams that we've"},{"speaker":"Spencer","startTime":1241.92,"endTime":1244.14,"body":"worked with, the IT and security"},{"speaker":"Spencer","startTime":1241.92,"endTime":1244.14,"body":"teams that we've worked with,"},{"speaker":"Spencer","startTime":1244.62,"endTime":1248.19,"body":"that have the most secured"},{"speaker":"Spencer","startTime":1244.62,"endTime":1248.19,"body":"environment by our standards,"},{"speaker":"Spencer","startTime":1248.91,"endTime":1254.85,"body":"that have the more most mature"},{"speaker":"Spencer","startTime":1248.91,"endTime":1254.85,"body":"controls, that are doing what we"},{"speaker":"Spencer","startTime":1255.09,"endTime":1258.48,"body":"feel is what's required to"},{"speaker":"Spencer","startTime":1255.09,"endTime":1258.48,"body":"defend their organization well,"},{"speaker":"Spencer","startTime":1259.26,"endTime":1261.86,"body":"they are making risk-based"},{"speaker":"Spencer","startTime":1259.26,"endTime":1261.86,"body":"decisions and they are"},{"speaker":"Spencer","startTime":1261.95,"endTime":1265.76,"body":"prioritizing things that are"},{"speaker":"Spencer","startTime":1261.95,"endTime":1265.76,"body":"more important, and they're"},{"speaker":"Spencer","startTime":1266.42,"endTime":1269.9,"body":"accepting things that are less"},{"speaker":"Spencer","startTime":1266.42,"endTime":1269.9,"body":"important. Because there's only"},{"speaker":"Spencer","startTime":1270.02,"endTime":1272.24,"body":"so much time in the day, there's"},{"speaker":"Spencer","startTime":1270.02,"endTime":1272.24,"body":"only so much you can do. You"},{"speaker":"Spencer","startTime":1272.24,"endTime":1276.41,"body":"only have so many resources. It"},{"speaker":"Spencer","startTime":1272.24,"endTime":1276.41,"body":"just makes sense to spend those"},{"speaker":"Spencer","startTime":1276.5,"endTime":1279.92,"body":"finite resources on the few"},{"speaker":"Spencer","startTime":1276.5,"endTime":1279.92,"body":"things that matter, and then"},{"speaker":"Spencer","startTime":1280.04,"endTime":1283.87,"body":"accept the things that that are"},{"speaker":"Spencer","startTime":1280.04,"endTime":1283.87,"body":"less impactful that have lower"},{"speaker":"Spencer","startTime":1283.99,"endTime":1286.66,"body":"likelihood, lower risk,"},{"speaker":"Spencer","startTime":1283.99,"endTime":1286.66,"body":"essentially."},{"speaker":"Brad Causey","startTime":1287.38,"endTime":1289.36,"body":"Yeah, I'll give you"},{"speaker":"Brad Causey","startTime":1287.38,"endTime":1289.36,"body":"a great example. Right, there"},{"speaker":"Brad Causey","startTime":1289.36,"endTime":1291.85,"body":"are two findings that are on"},{"speaker":"Brad Causey","startTime":1289.36,"endTime":1291.85,"body":"almost every external pen test"},{"speaker":"Brad Causey","startTime":1291.85,"endTime":1295.51,"body":"that we do. One of them is Suite"},{"speaker":"Brad Causey","startTime":1291.85,"endTime":1295.51,"body":"32. It's a high risk finding"},{"speaker":"Brad Causey","startTime":1295.6,"endTime":1300.49,"body":"according to the NVD, and the"},{"speaker":"Brad Causey","startTime":1295.6,"endTime":1300.49,"body":"other one is user enumeration"},{"speaker":"Brad Causey","startTime":1300.64,"endTime":1305.37,"body":"via Microsoft Teams or Microsoft"},{"speaker":"Brad Causey","startTime":1300.64,"endTime":1305.37,"body":"Online APIs. Okay, you can"},{"speaker":"Brad Causey","startTime":1305.58,"endTime":1310.2,"body":"almost guarantee that someone"},{"speaker":"Brad Causey","startTime":1305.58,"endTime":1310.2,"body":"who looks at that report and"},{"speaker":"Brad Causey","startTime":1310.26,"endTime":1312.84,"body":"says, \"I don't care about Suite"},{"speaker":"Brad Causey","startTime":1310.26,"endTime":1312.84,"body":"32. What can I do to mitigate"},{"speaker":"Brad Causey","startTime":1312.87,"endTime":1315.06,"body":"the risk associated with the"},{"speaker":"Brad Causey","startTime":1312.87,"endTime":1315.06,"body":"user enumer? It's a medium"},{"speaker":"Brad Causey","startTime":1315.09,"endTime":1317.43,"body":"finding, by the way. I think"},{"speaker":"Brad Causey","startTime":1315.09,"endTime":1317.43,"body":"it's like a 5.0 or 5.3. The"},{"speaker":"Brad Causey","startTime":1318.69,"endTime":1323.75,"body":"people that hone in on that over"},{"speaker":"Brad Causey","startTime":1318.69,"endTime":1323.75,"body":"the Sweet 32 vulnerability, you"},{"speaker":"Brad Causey","startTime":1323.99,"endTime":1326.45,"body":"you know right when you're"},{"speaker":"Brad Causey","startTime":1323.99,"endTime":1326.45,"body":"having those conversations with"},{"speaker":"Brad Causey","startTime":1326.48,"endTime":1328.37,"body":"them, and they're like, yeah,"},{"speaker":"Brad Causey","startTime":1326.48,"endTime":1328.37,"body":"yeah, Sweet 32, I don't give a"},{"speaker":"Brad Causey","startTime":1328.4,"endTime":1330.56,"body":"shit about that, and then"},{"speaker":"Brad Causey","startTime":1328.4,"endTime":1330.56,"body":"they're like, okay, but this"},{"speaker":"Brad Causey","startTime":1331.31,"endTime":1334.13,"body":"one, and we have like four very"},{"speaker":"Brad Causey","startTime":1331.31,"endTime":1334.13,"body":"detailed remediation steps that"},{"speaker":"Brad Causey","startTime":1334.16,"endTime":1337.34,"body":"don't that don't include turning"},{"speaker":"Brad Causey","startTime":1334.16,"endTime":1337.34,"body":"off things like SharePoint, but"},{"speaker":"Brad Causey","startTime":1338.06,"endTime":1340.93,"body":"but the the reason that I'm"},{"speaker":"Brad Causey","startTime":1338.06,"endTime":1340.93,"body":"saying that is because these"},{"speaker":"Brad Causey","startTime":1340.99,"endTime":1343.87,"body":"people understand what accepting"},{"speaker":"Brad Causey","startTime":1340.99,"endTime":1343.87,"body":"risk means, right? The amount of"},{"speaker":"Brad Causey","startTime":1343.96,"endTime":1346.45,"body":"effort required because if that"},{"speaker":"Brad Causey","startTime":1343.96,"endTime":1346.45,"body":"sweet 32 is on an appliance or a"},{"speaker":"Brad Causey","startTime":1346.51,"endTime":1349.24,"body":"third party website that you"},{"speaker":"Brad Causey","startTime":1346.51,"endTime":1349.24,"body":"don't control, and you're going"},{"speaker":"Brad Causey","startTime":1349.24,"endTime":1353.38,"body":"to have to fight over contracts"},{"speaker":"Brad Causey","startTime":1349.24,"endTime":1353.38,"body":"and who cares, man? Accepted,"},{"speaker":"Brad Causey","startTime":1353.77,"endTime":1356.68,"body":"move on, right? But but what"},{"speaker":"Brad Causey","startTime":1353.77,"endTime":1356.68,"body":"you're telling me now is that"},{"speaker":"Brad Causey","startTime":1357.04,"endTime":1360.01,"body":"all the users in my order can be"},{"speaker":"Brad Causey","startTime":1357.04,"endTime":1360.01,"body":"enumerated in a matter of hours"},{"speaker":"Brad Causey","startTime":1360.1,"endTime":1363.75,"body":"or minutes. I care substantially"},{"speaker":"Brad Causey","startTime":1360.1,"endTime":1363.75,"body":"about that. What can we do about"},{"speaker":"Brad Causey","startTime":1364.32,"endTime":1368.34,"body":"it? Again, the people that are"},{"speaker":"Brad Causey","startTime":1364.32,"endTime":1368.34,"body":"prioritizing and accepting these"},{"speaker":"Brad Causey","startTime":1368.64,"endTime":1372.03,"body":"relative to their impact to the"},{"speaker":"Brad Causey","startTime":1368.64,"endTime":1372.03,"body":"organization, they just have a"},{"speaker":"Brad Causey","startTime":1372.06,"endTime":1374.67,"body":"higher level of maturity. They"},{"speaker":"Brad Causey","startTime":1372.06,"endTime":1374.67,"body":"get it, if you if you will."},{"speaker":"Spencer","startTime":1375.209,"endTime":1378.329,"body":"Yep. Now, when you are"},{"speaker":"Spencer","startTime":1375.209,"endTime":1378.329,"body":"going through this process,"},{"speaker":"Spencer","startTime":1378.509,"endTime":1380.719,"body":"right, and you've got a pen"},{"speaker":"Spencer","startTime":1378.509,"endTime":1380.719,"body":"test, and you're looking at the"},{"speaker":"Spencer","startTime":1380.839,"endTime":1384.619,"body":"report, or you've done a"},{"speaker":"Spencer","startTime":1380.839,"endTime":1384.619,"body":"security assessment, or you're"},{"speaker":"Spencer","startTime":1384.859,"endTime":1387.739,"body":"looking to implement a new"},{"speaker":"Spencer","startTime":1384.859,"endTime":1387.739,"body":"product, or deciding on which"},{"speaker":"Spencer","startTime":1387.859,"endTime":1392.449,"body":"vendor to go with for a certain"},{"speaker":"Spencer","startTime":1387.859,"endTime":1392.449,"body":"thing, you can kind of use these"},{"speaker":"Spencer","startTime":1393.169,"endTime":1396.109,"body":"these ideas that we're going to"},{"speaker":"Spencer","startTime":1393.169,"endTime":1396.109,"body":"talk about next to kind of push"},{"speaker":"Spencer","startTime":1396.259,"endTime":1399.919,"body":"back a little bit, or to"},{"speaker":"Spencer","startTime":1396.259,"endTime":1399.919,"body":"evaluate the risks of these"},{"speaker":"Spencer","startTime":1400.039,"endTime":1405.069,"body":"things. So this can be done."},{"speaker":"Spencer","startTime":1400.039,"endTime":1405.069,"body":"There's a couple couple examples"},{"speaker":"Spencer","startTime":1405.159,"endTime":1409.149,"body":"here. One example is you're an"},{"speaker":"Spencer","startTime":1405.159,"endTime":1409.149,"body":"IT admin, and it's your job to"},{"speaker":"Spencer","startTime":1409.179,"endTime":1412.329,"body":"like remediate pen test"},{"speaker":"Spencer","startTime":1409.179,"endTime":1412.329,"body":"findings. And you know the CSO"},{"speaker":"Spencer","startTime":1412.509,"endTime":1415.419,"body":"is not a technical person; he"},{"speaker":"Spencer","startTime":1412.509,"endTime":1415.419,"body":"doesn't really understand kind"},{"speaker":"Spencer","startTime":1415.419,"endTime":1418.779,"body":"of the underlying technical"},{"speaker":"Spencer","startTime":1415.419,"endTime":1418.779,"body":"details or how impactful the"},{"speaker":"Spencer","startTime":1418.899,"endTime":1423.209,"body":"remediations can be or how"},{"speaker":"Spencer","startTime":1418.899,"endTime":1423.209,"body":"resource intensive fixing these"},{"speaker":"Spencer","startTime":1423.239,"endTime":1426.239,"body":"things can be, and they want you"},{"speaker":"Spencer","startTime":1423.239,"endTime":1426.239,"body":"to fix everything, and"},{"speaker":"Spencer","startTime":1426.299,"endTime":1429.899,"body":"everything's important, and"},{"speaker":"Spencer","startTime":1426.299,"endTime":1429.899,"body":"everything's urgent. So that's"},{"speaker":"Spencer","startTime":1430.049,"endTime":1432.569,"body":"one situation. The other"},{"speaker":"Spencer","startTime":1430.049,"endTime":1432.569,"body":"situation is you're a CIO,"},{"speaker":"Spencer","startTime":1432.809,"endTime":1435.749,"body":"you're in a management position,"},{"speaker":"Spencer","startTime":1432.809,"endTime":1435.749,"body":"and leadership are asking you,"},{"speaker":"Spencer","startTime":1436.799,"endTime":1440.659,"body":"\"Are we secure? Or we want to"},{"speaker":"Spencer","startTime":1436.799,"endTime":1440.659,"body":"implement this new accounting"},{"speaker":"Spencer","startTime":1440.749,"endTime":1444.619,"body":"software, and you need to do it"},{"speaker":"Spencer","startTime":1440.749,"endTime":1444.619,"body":"without kind of consulting you"},{"speaker":"Spencer","startTime":1444.679,"endTime":1447.769,"body":"or figuring out what the risks"},{"speaker":"Spencer","startTime":1444.679,"endTime":1447.769,"body":"are. So you can use this in in"},{"speaker":"Spencer","startTime":1448.369,"endTime":1451.699,"body":"multiple different situations."},{"speaker":"Spencer","startTime":1448.369,"endTime":1451.699,"body":"Just just keep that in context"},{"speaker":"Spencer","startTime":1451.729,"endTime":1451.819,"body":"here."},{"speaker":"Brad Causey","startTime":1452.57,"endTime":1452.63,"body":"Yeah."},{"speaker":"Spencer","startTime":1453.35,"endTime":1456.23,"body":"So this is this is kind"},{"speaker":"Spencer","startTime":1453.35,"endTime":1456.23,"body":"of like how to push back without"},{"speaker":"Spencer","startTime":1456.29,"endTime":1460.4,"body":"being uncooperative. And the"},{"speaker":"Spencer","startTime":1456.29,"endTime":1460.4,"body":"first thing is figuring out what"},{"speaker":"Spencer","startTime":1460.43,"endTime":1466.12,"body":"the technical costs are, so what"},{"speaker":"Spencer","startTime":1460.43,"endTime":1466.12,"body":"the business impact is, how how"},{"speaker":"Spencer","startTime":1466.27,"endTime":1469.72,"body":"long it's going to take, how"},{"speaker":"Spencer","startTime":1466.27,"endTime":1469.72,"body":"much it's going to cost, and"},{"speaker":"Spencer","startTime":1469.84,"endTime":1472.87,"body":"what the trade-offs are. In"},{"speaker":"Spencer","startTime":1469.84,"endTime":1472.87,"body":"other words, if we do if we"},{"speaker":"Spencer","startTime":1472.99,"endTime":1476.56,"body":"implement this software and it"},{"speaker":"Spencer","startTime":1472.99,"endTime":1476.56,"body":"costs this much, it takes this"},{"speaker":"Spencer","startTime":1476.65,"endTime":1479.89,"body":"much time, then we don't have"},{"speaker":"Spencer","startTime":1476.65,"endTime":1479.89,"body":"the time and money and resources"},{"speaker":"Spencer","startTime":1480.01,"endTime":1483.57,"body":"to do this thing over here,"},{"speaker":"Spencer","startTime":1480.01,"endTime":1483.57,"body":"which, by the way, you also said"},{"speaker":"Spencer","startTime":1483.66,"endTime":1487.05,"body":"was important, right? So this is"},{"speaker":"Spencer","startTime":1483.66,"endTime":1487.05,"body":"a way to get leadership to"},{"speaker":"Spencer","startTime":1487.11,"endTime":1490.74,"body":"decide what's most important,"},{"speaker":"Spencer","startTime":1487.11,"endTime":1490.74,"body":"and essentially you give them"},{"speaker":"Spencer","startTime":1490.8,"endTime":1493.08,"body":"the information that they need"},{"speaker":"Spencer","startTime":1490.8,"endTime":1493.08,"body":"to make that decision."},{"speaker":"Brad Causey","startTime":1493.74,"endTime":1495.87,"body":"Yeah, absolutely,"},{"speaker":"Brad Causey","startTime":1493.74,"endTime":1495.87,"body":"and that and that goes back to"},{"speaker":"Brad Causey","startTime":1495.87,"endTime":1499.47,"body":"what I was talking about earlier"},{"speaker":"Brad Causey","startTime":1495.87,"endTime":1499.47,"body":"with regard to how and what you"},{"speaker":"Brad Causey","startTime":1499.56,"endTime":1503.63,"body":"communicate. Leadership as a"},{"speaker":"Brad Causey","startTime":1499.56,"endTime":1503.63,"body":"sysadmin, network engineer, you"},{"speaker":"Brad Causey","startTime":1503.63,"endTime":1508.55,"body":"know, break, fix, dude, do that."},{"speaker":"Brad Causey","startTime":1503.63,"endTime":1508.55,"body":"It's important because I think"},{"speaker":"Brad Causey","startTime":1508.64,"endTime":1511.04,"body":"that again, especially if you"},{"speaker":"Brad Causey","startTime":1508.64,"endTime":1511.04,"body":"have a non-technical manager"},{"speaker":"Brad Causey","startTime":1511.1,"endTime":1513.89,"body":"who's never lived in your shoes"},{"speaker":"Brad Causey","startTime":1511.1,"endTime":1513.89,"body":"before, they don't know unless"},{"speaker":"Brad Causey","startTime":1513.98,"endTime":1518.96,"body":"you tell them. And so, you know,"},{"speaker":"Brad Causey","startTime":1513.98,"endTime":1518.96,"body":"we as technical, I don't know,"},{"speaker":"Brad Causey","startTime":1519.2,"endTime":1522.4,"body":"guys in the trenches or"},{"speaker":"Brad Causey","startTime":1519.2,"endTime":1522.4,"body":"whatever, we we own some level"},{"speaker":"Brad Causey","startTime":1522.46,"endTime":1526.18,"body":"of responsibility with regard to"},{"speaker":"Brad Causey","startTime":1522.46,"endTime":1526.18,"body":"that communication, and and it's"},{"speaker":"Brad Causey","startTime":1526.18,"endTime":1529.63,"body":"the sooner we take ownership of"},{"speaker":"Brad Causey","startTime":1526.18,"endTime":1529.63,"body":"that and do a good job of it, we"},{"speaker":"Brad Causey","startTime":1529.84,"endTime":1532.36,"body":"are transferring the"},{"speaker":"Brad Causey","startTime":1529.84,"endTime":1532.36,"body":"responsibility of that risk"},{"speaker":"Brad Causey","startTime":1532.39,"endTime":1536.56,"body":"decision to somebody who has"},{"speaker":"Brad Causey","startTime":1532.39,"endTime":1536.56,"body":"hold for it the authority to do"},{"speaker":"Brad Causey","startTime":1536.56,"endTime":1538.39,"body":"it, which is in your next"},{"speaker":"Brad Causey","startTime":1536.56,"endTime":1538.39,"body":"section, by the way. I told"},{"speaker":"Brad Causey","startTime":1538.42,"endTime":1541.92,"body":"that, but but yeah, I mean you"},{"speaker":"Brad Causey","startTime":1538.42,"endTime":1541.92,"body":"know, somebody's got to own it."},{"speaker":"Brad Causey","startTime":1542.04,"endTime":1545.1,"body":"The sysadmin can't. You cannot"},{"speaker":"Brad Causey","startTime":1542.04,"endTime":1545.1,"body":"have a sysadmin own the"},{"speaker":"Brad Causey","startTime":1545.19,"endTime":1548.34,"body":"responsibility of accepting"},{"speaker":"Brad Causey","startTime":1545.19,"endTime":1548.34,"body":"risk, and it just comes down to"},{"speaker":"Brad Causey","startTime":1548.37,"endTime":1548.94,"body":"communication."},{"speaker":"Spencer","startTime":1549.48,"endTime":1553.53,"body":"Yep. So by translating"},{"speaker":"Spencer","startTime":1549.48,"endTime":1553.53,"body":"those technical gaps into, like"},{"speaker":"Spencer","startTime":1553.56,"endTime":1557.19,"body":"I said, business impact, time,"},{"speaker":"Spencer","startTime":1553.56,"endTime":1557.19,"body":"cost, and trade offs, you can"},{"speaker":"Spencer","startTime":1557.73,"endTime":1562.73,"body":"help IT leadership make those"},{"speaker":"Spencer","startTime":1557.73,"endTime":1562.73,"body":"decisions for you on what is"},{"speaker":"Spencer","startTime":1562.82,"endTime":1565.61,"body":"most important. The next thing"},{"speaker":"Spencer","startTime":1562.82,"endTime":1565.61,"body":"is before you go on"},{"speaker":"Brad Causey","startTime":1565.61,"endTime":1568.52,"body":"to the next thing."},{"speaker":"Brad Causey","startTime":1565.61,"endTime":1568.52,"body":"I want to add something: is what"},{"speaker":"Brad Causey","startTime":1568.55,"endTime":1572.33,"body":"we are advocating for is not you"},{"speaker":"Brad Causey","startTime":1568.55,"endTime":1572.33,"body":"going to your management and"},{"speaker":"Brad Causey","startTime":1572.42,"endTime":1575.3,"body":"saying you told me to do four"},{"speaker":"Brad Causey","startTime":1572.42,"endTime":1575.3,"body":"things, I got time for two. What"},{"speaker":"Brad Causey","startTime":1575.3,"endTime":1578.72,"body":"do you want? That's the wrong"},{"speaker":"Brad Causey","startTime":1575.3,"endTime":1578.72,"body":"way to approach that, right?"},{"speaker":"Brad Causey","startTime":1579.05,"endTime":1581.74,"body":"One, it's confrontational and"},{"speaker":"Brad Causey","startTime":1579.05,"endTime":1581.74,"body":"adversarial. Two, you're not"},{"speaker":"Brad Causey","startTime":1581.77,"endTime":1584.29,"body":"providing them with an adequate"},{"speaker":"Brad Causey","startTime":1581.77,"endTime":1584.29,"body":"amount of information to make an"},{"speaker":"Brad Causey","startTime":1584.32,"endTime":1588.16,"body":"intelligent decision. All right,"},{"speaker":"Brad Causey","startTime":1584.32,"endTime":1588.16,"body":"start treating. We we call it"},{"speaker":"Brad Causey","startTime":1588.19,"endTime":1592.9,"body":"managing up, right? And and so"},{"speaker":"Brad Causey","startTime":1588.19,"endTime":1592.9,"body":"stop treating management as if"},{"speaker":"Brad Causey","startTime":1592.99,"endTime":1596.5,"body":"they understand the same stuff"},{"speaker":"Brad Causey","startTime":1592.99,"endTime":1596.5,"body":"you understand because 99% of"},{"speaker":"Brad Causey","startTime":1596.5,"endTime":1600.22,"body":"the time they don't have that,"},{"speaker":"Brad Causey","startTime":1596.5,"endTime":1600.22,"body":"right? Unless they came from"},{"speaker":"Brad Causey","startTime":1600.31,"endTime":1602.61,"body":"that role that you're now in,"},{"speaker":"Brad Causey","startTime":1600.31,"endTime":1602.61,"body":"which which if they did,"},{"speaker":"Brad Causey","startTime":1602.82,"endTime":1604.86,"body":"awesome. We're probably not"},{"speaker":"Brad Causey","startTime":1602.82,"endTime":1604.86,"body":"having this conversation in that"},{"speaker":"Brad Causey","startTime":1604.92,"endTime":1609.48,"body":"case, but if we are, you need to"},{"speaker":"Brad Causey","startTime":1604.92,"endTime":1609.48,"body":"communicate an adequate amount"},{"speaker":"Brad Causey","startTime":1609.48,"endTime":1612.15,"body":"of information for them to make"},{"speaker":"Brad Causey","startTime":1609.48,"endTime":1612.15,"body":"an intelligent decision. So I'm"},{"speaker":"Brad Causey","startTime":1612.21,"endTime":1614.79,"body":"going to take that same"},{"speaker":"Brad Causey","startTime":1612.21,"endTime":1614.79,"body":"scenario. You asked me to do"},{"speaker":"Brad Causey","startTime":1614.88,"endTime":1619.08,"body":"these four things. I have time"},{"speaker":"Brad Causey","startTime":1614.88,"endTime":1619.08,"body":"for two. I recommend A and C,"},{"speaker":"Brad Causey","startTime":1619.65,"endTime":1622.97,"body":"and here's why, and here's when"},{"speaker":"Brad Causey","startTime":1619.65,"endTime":1622.97,"body":"we're going to be able to get"},{"speaker":"Brad Causey","startTime":1623.09,"endTime":1627.65,"body":"around to you know B and D if we"},{"speaker":"Brad Causey","startTime":1623.09,"endTime":1627.65,"body":"don't start adding things to the"},{"speaker":"Brad Causey","startTime":1627.74,"endTime":1630.65,"body":"to the workload and and so again"},{"speaker":"Brad Causey","startTime":1627.74,"endTime":1630.65,"body":"you have to give them that"},{"speaker":"Brad Causey","startTime":1630.68,"endTime":1634.19,"body":"complete picture and and I think"},{"speaker":"Brad Causey","startTime":1630.68,"endTime":1634.19,"body":"that's going to help a lot"},{"speaker":"Brad Causey","startTime":1634.28,"endTime":1636.41,"body":"because it's going to feel more"},{"speaker":"Brad Causey","startTime":1634.28,"endTime":1636.41,"body":"like we're all playing for the"},{"speaker":"Brad Causey","startTime":1636.53,"endTime":1640.46,"body":"same team and less like you're"},{"speaker":"Brad Causey","startTime":1636.53,"endTime":1640.46,"body":"pushing back from an adversarial"},{"speaker":"Brad Causey","startTime":1640.52,"endTime":1642.13,"body":"perspective. So, all right,"},{"speaker":"Brad Causey","startTime":1640.52,"endTime":1642.13,"body":"moving on. Sorry."},{"speaker":"Spencer","startTime":1642.55,"endTime":1645.46,"body":"Yeah. No, that that was"},{"speaker":"Spencer","startTime":1642.55,"endTime":1645.46,"body":"that was going to be my next"},{"speaker":"Spencer","startTime":1645.52,"endTime":1649.69,"body":"point was giving leadership or"},{"speaker":"Spencer","startTime":1645.52,"endTime":1649.69,"body":"management the the power to"},{"speaker":"Spencer","startTime":1649.75,"endTime":1654.19,"body":"decide as opposed to you"},{"speaker":"Spencer","startTime":1649.75,"endTime":1654.19,"body":"deciding for them. I had a"},{"speaker":"Spencer","startTime":1654.46,"endTime":1656.56,"body":"meeting with a client actually"},{"speaker":"Spencer","startTime":1654.46,"endTime":1656.56,"body":"just today where we were talking"},{"speaker":"Spencer","startTime":1656.56,"endTime":1659.11,"body":"about this where they had a lot"},{"speaker":"Spencer","startTime":1656.56,"endTime":1659.11,"body":"of projects that are kind of"},{"speaker":"Spencer","startTime":1659.14,"endTime":1664.47,"body":"being tossed over the fence to"},{"speaker":"Spencer","startTime":1659.14,"endTime":1664.47,"body":"IT and the the risk is on them"},{"speaker":"Spencer","startTime":1664.62,"endTime":1667.17,"body":"because they're now making the"},{"speaker":"Spencer","startTime":1664.62,"endTime":1667.17,"body":"decision on which projects are"},{"speaker":"Spencer","startTime":1667.17,"endTime":1670.26,"body":"most important. And I encourage"},{"speaker":"Spencer","startTime":1667.17,"endTime":1670.26,"body":"them to push back a little bit"},{"speaker":"Spencer","startTime":1670.59,"endTime":1673.98,"body":"and to use the strategy to"},{"speaker":"Spencer","startTime":1670.59,"endTime":1673.98,"body":"figure out what the impact is,"},{"speaker":"Spencer","startTime":1673.98,"endTime":1677.07,"body":"how much time it's going to"},{"speaker":"Spencer","startTime":1673.98,"endTime":1677.07,"body":"take, what it's going to cost,"},{"speaker":"Spencer","startTime":1677.1,"endTime":1679.92,"body":"like what are the trade offs,"},{"speaker":"Spencer","startTime":1677.1,"endTime":1679.92,"body":"and then bringing that to the"},{"speaker":"Spencer","startTime":1680.01,"endTime":1684.68,"body":"leadership and say, hey, we have"},{"speaker":"Spencer","startTime":1680.01,"endTime":1684.68,"body":"10 projects on the docket."},{"speaker":"Spencer","startTime":1685.55,"endTime":1687.86,"body":"Here's the the parameters for"},{"speaker":"Spencer","startTime":1685.55,"endTime":1687.86,"body":"each of these. Here's the"},{"speaker":"Spencer","startTime":1687.95,"endTime":1690.83,"body":"information for each of these."},{"speaker":"Spencer","startTime":1687.95,"endTime":1690.83,"body":"Which one of these is most"},{"speaker":"Spencer","startTime":1690.86,"endTime":1694.55,"body":"important, or which one of"},{"speaker":"Spencer","startTime":1690.86,"endTime":1694.55,"body":"these, in what order should we"},{"speaker":"Spencer","startTime":1694.7,"endTime":1698.3,"body":"tackle these? And letting them"},{"speaker":"Spencer","startTime":1694.7,"endTime":1698.3,"body":"decide based on that, because"},{"speaker":"Spencer","startTime":1698.84,"endTime":1701.56,"body":"they have the full picture of"},{"speaker":"Spencer","startTime":1698.84,"endTime":1701.56,"body":"the organization or the"},{"speaker":"Spencer","startTime":1701.65,"endTime":1703.72,"body":"enterprise or the university or"},{"speaker":"Spencer","startTime":1701.65,"endTime":1703.72,"body":"whatever it"},{"speaker":"Brad Causey","startTime":1704.44,"endTime":1704.53,"body":"is,"},{"speaker":"Spencer","startTime":1704.65,"endTime":1707.41,"body":"they have a complete"},{"speaker":"Spencer","startTime":1704.65,"endTime":1707.41,"body":"picture, and IT usually doesn't."},{"speaker":"Spencer","startTime":1707.86,"endTime":1710.77,"body":"Right, so it's helpful to to"},{"speaker":"Spencer","startTime":1707.86,"endTime":1710.77,"body":"make that distinction. It is, it"},{"speaker":"Brad Causey","startTime":1710.77,"endTime":1712.81,"body":"is, and and don't"},{"speaker":"Brad Causey","startTime":1710.77,"endTime":1712.81,"body":"be afraid to make"},{"speaker":"Brad Causey","startTime":1712.87,"endTime":1716.86,"body":"recommendations though, right?"},{"speaker":"Brad Causey","startTime":1712.87,"endTime":1716.86,"body":"Especially if you have unique"},{"speaker":"Brad Causey","startTime":1716.92,"endTime":1720.24,"body":"visibility into you know more"},{"speaker":"Brad Causey","startTime":1716.92,"endTime":1720.24,"body":"things than they might from a"},{"speaker":"Brad Causey","startTime":1720.36,"endTime":1722.52,"body":"from a low level technical"},{"speaker":"Brad Causey","startTime":1720.36,"endTime":1722.52,"body":"perspective, but the"},{"speaker":"Spencer","startTime":1723.36,"endTime":1728.16,"body":"next one is something"},{"speaker":"Spencer","startTime":1723.36,"endTime":1728.16,"body":"that I think"},{"speaker":"Brad Causey","startTime":1729.06,"endTime":1730.56,"body":"is bro. This needs"},{"speaker":"Brad Causey","startTime":1729.06,"endTime":1730.56,"body":"to be a whole podcast."},{"speaker":"Spencer","startTime":1731.1,"endTime":1733.14,"body":"Yeah, no, I think I"},{"speaker":"Spencer","startTime":1731.1,"endTime":1733.14,"body":"think this is like something"},{"speaker":"Spencer","startTime":1733.2,"endTime":1736.32,"body":"that is not something that"},{"speaker":"Spencer","startTime":1733.2,"endTime":1736.32,"body":"people typically think about,"},{"speaker":"Spencer","startTime":1736.65,"endTime":1740.82,"body":"and that is asking leadership to"},{"speaker":"Spencer","startTime":1736.65,"endTime":1740.82,"body":"define the organization's risk"},{"speaker":"Spencer","startTime":1741.0,"endTime":1746.54,"body":"tolerance. So, as IT people, we"},{"speaker":"Spencer","startTime":1741.0,"endTime":1746.54,"body":"understand the technical aspects"},{"speaker":"Spencer","startTime":1746.6,"endTime":1751.46,"body":"of this, and we understand the"},{"speaker":"Spencer","startTime":1746.6,"endTime":1751.46,"body":"risks in many cases, but we"},{"speaker":"Spencer","startTime":1751.55,"endTime":1755.48,"body":"don't understand the"},{"speaker":"Spencer","startTime":1751.55,"endTime":1755.48,"body":"organization or the enterprise's"},{"speaker":"Spencer","startTime":1756.14,"endTime":1762.16,"body":"stance or their determination of"},{"speaker":"Spencer","startTime":1756.14,"endTime":1762.16,"body":"what risk is to the organization"},{"speaker":"Spencer","startTime":1762.22,"endTime":1764.68,"body":"or to the enterprise, right?"},{"speaker":"Spencer","startTime":1762.22,"endTime":1764.68,"body":"Like, what is their level of"},{"speaker":"Spencer","startTime":1764.74,"endTime":1772.24,"body":"risk tolerance? Maybe it's that"},{"speaker":"Spencer","startTime":1764.74,"endTime":1772.24,"body":"any any high vulnerability"},{"speaker":"Spencer","startTime":1772.69,"endTime":1775.87,"body":"externally needs to be patched,"},{"speaker":"Spencer","startTime":1772.69,"endTime":1775.87,"body":"critical or high, needs to be"},{"speaker":"Spencer","startTime":1775.96,"endTime":1778.21,"body":"patched within a certain amount"},{"speaker":"Spencer","startTime":1775.96,"endTime":1778.21,"body":"of time, and they they agree to"},{"speaker":"Spencer","startTime":1778.24,"endTime":1782.73,"body":"that, right? Maybe it's not."},{"speaker":"Spencer","startTime":1778.24,"endTime":1782.73,"body":"Maybe they have different"},{"speaker":"Spencer","startTime":1785.88,"endTime":1789.0,"body":"decision trees in their head for"},{"speaker":"Spencer","startTime":1785.88,"endTime":1789.0,"body":"like what is their risk"},{"speaker":"Spencer","startTime":1789.06,"endTime":1793.41,"body":"tolerance. So really, my point"},{"speaker":"Spencer","startTime":1789.06,"endTime":1793.41,"body":"of this is trying to understand"},{"speaker":"Spencer","startTime":1794.52,"endTime":1797.25,"body":"what the organization or the"},{"speaker":"Spencer","startTime":1794.52,"endTime":1797.25,"body":"enterprise's risk tolerance"},{"speaker":"Unknown","startTime":1798.06,"endTime":1798.15,"body":"is,"},{"speaker":"Spencer","startTime":1798.6,"endTime":1803.57,"body":"and that. Allowing that"},{"speaker":"Spencer","startTime":1798.6,"endTime":1803.57,"body":"to kind of help guide and make"},{"speaker":"Spencer","startTime":1803.63,"endTime":1805.76,"body":"decisions in IT and security"},{"speaker":"Spencer","startTime":1803.63,"endTime":1805.76,"body":"based on that."},{"speaker":"Brad Causey","startTime":1806.3,"endTime":1809.3,"body":"I completely agree,"},{"speaker":"Brad Causey","startTime":1806.3,"endTime":1809.3,"body":"and and I I love that you put"},{"speaker":"Brad Causey","startTime":1809.33,"endTime":1814.1,"body":"this in here because I think it"},{"speaker":"Brad Causey","startTime":1809.33,"endTime":1814.1,"body":"is the unsung kind of hero of"},{"speaker":"Brad Causey","startTime":1814.4,"endTime":1818.81,"body":"top down guidance, and it's one"},{"speaker":"Brad Causey","startTime":1814.4,"endTime":1818.81,"body":"of the things that management"},{"speaker":"Brad Causey","startTime":1818.87,"endTime":1822.01,"body":"can do to kind of ease and maybe"},{"speaker":"Brad Causey","startTime":1818.87,"endTime":1822.01,"body":"ease is the wrong word, but"},{"speaker":"Brad Causey","startTime":1822.1,"endTime":1826.96,"body":"guide and and put guardrails up"},{"speaker":"Brad Causey","startTime":1822.1,"endTime":1826.96,"body":"around decisions. It's also part"},{"speaker":"Brad Causey","startTime":1826.96,"endTime":1829.99,"body":"of empowering your team to be"},{"speaker":"Brad Causey","startTime":1826.96,"endTime":1829.99,"body":"successful because if they don't"},{"speaker":"Brad Causey","startTime":1830.05,"endTime":1833.17,"body":"know, then you know they're"},{"speaker":"Brad Causey","startTime":1830.05,"endTime":1833.17,"body":"gonna like you like you have"},{"speaker":"Brad Causey","startTime":1833.26,"endTime":1836.62,"body":"here. They're gonna silently"},{"speaker":"Brad Causey","startTime":1833.26,"endTime":1836.62,"body":"assume whatever it is. And and"},{"speaker":"Brad Causey","startTime":1836.62,"endTime":1839.38,"body":"and by the way, this goes back"},{"speaker":"Brad Causey","startTime":1836.62,"endTime":1839.38,"body":"to understanding how to accept"},{"speaker":"Brad Causey","startTime":1839.47,"endTime":1841.83,"body":"risk. Is the same thing about"},{"speaker":"Brad Causey","startTime":1839.47,"endTime":1841.83,"body":"from a risk tolerance"},{"speaker":"Brad Causey","startTime":1841.92,"endTime":1846.54,"body":"perspective. Anybody who says we"},{"speaker":"Brad Causey","startTime":1841.92,"endTime":1846.54,"body":"have zero risk tolerance has no"},{"speaker":"Brad Causey","startTime":1846.66,"endTime":1849.27,"body":"idea what they're talking about,"},{"speaker":"Brad Causey","startTime":1846.66,"endTime":1849.27,"body":"right? Everybody has risk"},{"speaker":"Brad Causey","startTime":1849.3,"endTime":1852.75,"body":"tolerance, and and and I would"},{"speaker":"Brad Causey","startTime":1849.3,"endTime":1852.75,"body":"say don't shy away from having a"},{"speaker":"Brad Causey","startTime":1852.9,"endTime":1855.09,"body":"higher level of risk tolerance"},{"speaker":"Brad Causey","startTime":1852.9,"endTime":1855.09,"body":"because you know if you're a"},{"speaker":"Brad Causey","startTime":1855.15,"endTime":1859.5,"body":"small startup, you know if you"},{"speaker":"Brad Causey","startTime":1855.15,"endTime":1859.5,"body":"are in an organization where you"},{"speaker":"Brad Causey","startTime":1859.56,"endTime":1865.76,"body":"have a lot of mitigations around"},{"speaker":"Brad Causey","startTime":1859.56,"endTime":1865.76,"body":"risk. You know, having a low"},{"speaker":"Brad Causey","startTime":1865.91,"endTime":1868.52,"body":"risk tolerance is an easy thing"},{"speaker":"Brad Causey","startTime":1865.91,"endTime":1868.52,"body":"to say. It's incredibly"},{"speaker":"Brad Causey","startTime":1868.58,"endTime":1872.24,"body":"difficult in execution. Yep. And"},{"speaker":"Brad Causey","startTime":1868.58,"endTime":1872.24,"body":"so, spend some time. And now I'm"},{"speaker":"Brad Causey","startTime":1872.3,"endTime":1874.55,"body":"talking to management and"},{"speaker":"Brad Causey","startTime":1872.3,"endTime":1874.55,"body":"executives. Spend some time"},{"speaker":"Brad Causey","startTime":1875.45,"endTime":1878.63,"body":"understanding what the heck that"},{"speaker":"Brad Causey","startTime":1875.45,"endTime":1878.63,"body":"means and making an intelligent"},{"speaker":"Brad Causey","startTime":1878.63,"endTime":1881.8,"body":"decision about it, and finally"},{"speaker":"Brad Causey","startTime":1878.63,"endTime":1881.8,"body":"communicating that downstream to"},{"speaker":"Brad Causey","startTime":1881.86,"endTime":1884.32,"body":"people who are actually working"},{"speaker":"Brad Causey","startTime":1881.86,"endTime":1884.32,"body":"in the trenches because this is"},{"speaker":"Brad Causey","startTime":1884.56,"endTime":1885.28,"body":"helpful to them."},{"speaker":"Spencer","startTime":1885.7,"endTime":1888.82,"body":"Yep, and I think a you"},{"speaker":"Spencer","startTime":1885.7,"endTime":1888.82,"body":"know an example that I was"},{"speaker":"Spencer","startTime":1888.91,"endTime":1892.51,"body":"thinking of in my head was there"},{"speaker":"Spencer","startTime":1888.91,"endTime":1892.51,"body":"are many compliance frameworks"},{"speaker":"Spencer","startTime":1892.51,"endTime":1894.97,"body":"and there's many standards that"},{"speaker":"Spencer","startTime":1892.51,"endTime":1894.97,"body":"say you should block USB"},{"speaker":"Spencer","startTime":1895.84,"endTime":1899.11,"body":"external USB drives. Right,"},{"speaker":"Spencer","startTime":1895.84,"endTime":1899.11,"body":"that's a thing like people do"},{"speaker":"Spencer","startTime":1900.22,"endTime":1900.51,"body":"it. Bro, we"},{"speaker":"Brad Causey","startTime":1900.57,"endTime":1902.79,"body":"used to we used to"},{"speaker":"Brad Causey","startTime":1900.57,"endTime":1902.79,"body":"glue them shut. We were that"},{"speaker":"Brad Causey","startTime":1902.88,"endTime":1905.31,"body":"worried about it, right? I mean,"},{"speaker":"Brad Causey","startTime":1902.88,"endTime":1905.31,"body":"this was a long time ago. Yeah,"},{"speaker":"Brad Causey","startTime":1905.49,"endTime":1907.98,"body":"you know, but but back when it"},{"speaker":"Brad Causey","startTime":1905.49,"endTime":1907.98,"body":"was like everybody has to do"},{"speaker":"Brad Causey","startTime":1908.04,"endTime":1909.18,"body":"everything all the time. Yeah."},{"speaker":"Spencer","startTime":1910.35,"endTime":1914.13,"body":"So you can block USB"},{"speaker":"Spencer","startTime":1910.35,"endTime":1914.13,"body":"ports, right? Then you can't use"},{"speaker":"Spencer","startTime":1914.22,"endTime":1917.1,"body":"them for thumb drives and"},{"speaker":"Spencer","startTime":1914.22,"endTime":1917.1,"body":"external hard drives. And"},{"speaker":"Spencer","startTime":1917.58,"endTime":1920.12,"body":"there's convenience for users"},{"speaker":"Spencer","startTime":1917.58,"endTime":1920.12,"body":"who, especially who are on the"},{"speaker":"Spencer","startTime":1920.27,"endTime":1923.18,"body":"go, or they go to conferences,"},{"speaker":"Spencer","startTime":1920.27,"endTime":1923.18,"body":"or like you know they're out and"},{"speaker":"Spencer","startTime":1923.18,"endTime":1925.76,"body":"about and they need to use that"},{"speaker":"Spencer","startTime":1923.18,"endTime":1925.76,"body":"stuff. There's complications"},{"speaker":"Spencer","startTime":1925.82,"endTime":1928.88,"body":"with that. If your"},{"speaker":"Spencer","startTime":1925.82,"endTime":1928.88,"body":"organization's risk tolerance is"},{"speaker":"Spencer","startTime":1928.97,"endTime":1934.37,"body":"such that you, let's say, the"},{"speaker":"Spencer","startTime":1928.97,"endTime":1934.37,"body":"leadership don't necessarily"},{"speaker":"Spencer","startTime":1934.49,"endTime":1937.46,"body":"consider that a high risk,"},{"speaker":"Spencer","startTime":1934.49,"endTime":1937.46,"body":"right? Of like somebody stealing"},{"speaker":"Spencer","startTime":1937.64,"endTime":1941.83,"body":"data or siphoning it out or"},{"speaker":"Spencer","startTime":1937.64,"endTime":1941.83,"body":"plugging USB drive in and you"},{"speaker":"Spencer","startTime":1941.86,"endTime":1944.44,"body":"know executing malware or"},{"speaker":"Spencer","startTime":1941.86,"endTime":1944.44,"body":"something. If they don't"},{"speaker":"Spencer","startTime":1944.47,"endTime":1947.56,"body":"perceive that as being a high"},{"speaker":"Spencer","startTime":1944.47,"endTime":1947.56,"body":"risk, and you as the IT"},{"speaker":"Spencer","startTime":1947.59,"endTime":1950.62,"body":"department go through all this"},{"speaker":"Spencer","startTime":1947.59,"endTime":1950.62,"body":"effort to get these controls in"},{"speaker":"Spencer","startTime":1950.68,"endTime":1954.28,"body":"place that end up frustrating"},{"speaker":"Spencer","startTime":1950.68,"endTime":1954.28,"body":"your users, you're misaligned"},{"speaker":"Spencer","startTime":1954.55,"endTime":1957.64,"body":"with the organization's you know"},{"speaker":"Spencer","startTime":1954.55,"endTime":1957.64,"body":"risk tolerance. Yeah, you're"},{"speaker":"Spencer","startTime":1957.76,"endTime":1960.1,"body":"you're misaligned there, and"},{"speaker":"Spencer","startTime":1957.76,"endTime":1960.1,"body":"you're going to spin your wheels"},{"speaker":"Spencer","startTime":1960.13,"endTime":1962.7,"body":"and spend a lot of time on"},{"speaker":"Spencer","startTime":1960.13,"endTime":1962.7,"body":"something that maybe the"},{"speaker":"Spencer","startTime":1962.76,"endTime":1965.46,"body":"organization doesn't necessarily"},{"speaker":"Spencer","startTime":1962.76,"endTime":1965.46,"body":"think is that high of a risk."},{"speaker":"Spencer","startTime":1965.88,"endTime":1969.18,"body":"You might think it is, but maybe"},{"speaker":"Spencer","startTime":1965.88,"endTime":1969.18,"body":"it's not to the business itself."},{"speaker":"Spencer","startTime":1969.81,"endTime":1972.75,"body":"And then you kind of see where"},{"speaker":"Spencer","startTime":1969.81,"endTime":1972.75,"body":"that is going. I think."},{"speaker":"Brad Causey","startTime":1973.17,"endTime":1975.81,"body":"Yeah. No."},{"speaker":"Brad Causey","startTime":1973.17,"endTime":1975.81,"body":"Absolutely, man. And and you"},{"speaker":"Brad Causey","startTime":1975.84,"endTime":1979.89,"body":"know, let's be real, right? USB"},{"speaker":"Brad Causey","startTime":1975.84,"endTime":1979.89,"body":"drive threats pretty low these"},{"speaker":"Brad Causey","startTime":1979.98,"endTime":1983.18,"body":"days. You know, if you're"},{"speaker":"Brad Causey","startTime":1979.98,"endTime":1983.18,"body":"worried about it from a from a"},{"speaker":"Brad Causey","startTime":1983.27,"endTime":1985.67,"body":"data loss perspective, that's a"},{"speaker":"Brad Causey","startTime":1983.27,"endTime":1985.67,"body":"different conversation. That's"},{"speaker":"Brad Causey","startTime":1985.76,"endTime":1989.24,"body":"that's also a different risk"},{"speaker":"Brad Causey","startTime":1985.76,"endTime":1989.24,"body":"profile, by the way. Risk"},{"speaker":"Brad Causey","startTime":1989.33,"endTime":1992.15,"body":"acceptance, you know, all that"},{"speaker":"Brad Causey","startTime":1989.33,"endTime":1992.15,"body":"good stuff. So, so yeah, dude."},{"speaker":"Brad Causey","startTime":1992.24,"endTime":1995.48,"body":"And and and by the way, and I'll"},{"speaker":"Brad Causey","startTime":1992.24,"endTime":1995.48,"body":"keep on that same thread. How"},{"speaker":"Brad Causey","startTime":1995.57,"endTime":1998.51,"body":"many how many approvals are"},{"speaker":"Brad Causey","startTime":1995.57,"endTime":1998.51,"body":"coming through where people are"},{"speaker":"Brad Causey","startTime":1998.51,"endTime":2001.17,"body":"like, oh, I need to access my"},{"speaker":"Brad Causey","startTime":1998.51,"endTime":2001.17,"body":"USB drive. We're making more"},{"speaker":"Brad Causey","startTime":2001.32,"endTime":2004.74,"body":"work for ourselves to address a"},{"speaker":"Brad Causey","startTime":2001.32,"endTime":2004.74,"body":"threat that is completely"},{"speaker":"Brad Causey","startTime":2004.86,"endTime":2008.52,"body":"unrealistic in 2026, right? If"},{"speaker":"Brad Causey","startTime":2004.86,"endTime":2008.52,"body":"I'm the CISO, I'm going to ask"},{"speaker":"Brad Causey","startTime":2008.55,"endTime":2011.28,"body":"my IT manager, \"Yo, dude, how"},{"speaker":"Brad Causey","startTime":2008.55,"endTime":2011.28,"body":"many approvals did you have last"},{"speaker":"Brad Causey","startTime":2011.31,"endTime":2014.73,"body":"year or this year? And if it's"},{"speaker":"Brad Causey","startTime":2011.31,"endTime":2014.73,"body":"more than two, just turn that"},{"speaker":"Brad Causey","startTime":2014.79,"endTime":2018.99,"body":"crap off, dude. Let them have"},{"speaker":"Brad Causey","startTime":2014.79,"endTime":2018.99,"body":"the USB drives, right? And and"},{"speaker":"Brad Causey","startTime":2019.14,"endTime":2021.08,"body":"so you know, again, it's going"},{"speaker":"Brad Causey","startTime":2019.14,"endTime":2021.08,"body":"to depend on a number of"},{"speaker":"Brad Causey","startTime":2021.11,"endTime":2023.69,"body":"different factors. I'm using"},{"speaker":"Brad Causey","startTime":2021.11,"endTime":2023.69,"body":"this as an example. So if you go"},{"speaker":"Brad Causey","startTime":2023.78,"endTime":2027.2,"body":"turn USB back on and everybody"},{"speaker":"Brad Causey","startTime":2023.78,"endTime":2027.2,"body":"gets hacked, don't blame me. But"},{"speaker":"Brad Causey","startTime":2027.35,"endTime":2030.86,"body":"but the point is, let's be"},{"speaker":"Brad Causey","startTime":2027.35,"endTime":2030.86,"body":"realistic, and let's look at"},{"speaker":"Brad Causey","startTime":2030.92,"endTime":2032.36,"body":"this from a pragmatic"},{"speaker":"Brad Causey","startTime":2030.92,"endTime":2032.36,"body":"perspective."},{"speaker":"Spencer","startTime":2032.69,"endTime":2035.78,"body":"Yep. So the last thing"},{"speaker":"Spencer","startTime":2032.69,"endTime":2035.78,"body":"before we move on to the last"},{"speaker":"Spencer","startTime":2035.81,"endTime":2041.14,"body":"section is I've heard I heard a"},{"speaker":"Spencer","startTime":2035.81,"endTime":2041.14,"body":"friend say this, and I thought"},{"speaker":"Spencer","startTime":2041.14,"endTime":2046.81,"body":"it was just a beautiful way to"},{"speaker":"Spencer","startTime":2041.14,"endTime":2046.81,"body":"to present present an argument"},{"speaker":"Spencer","startTime":2046.9,"endTime":2050.95,"body":"for evaluating what upgrades you"},{"speaker":"Spencer","startTime":2046.9,"endTime":2050.95,"body":"do, or what software you"},{"speaker":"Spencer","startTime":2051.01,"endTime":2056.08,"body":"implement, or what projects you"},{"speaker":"Spencer","startTime":2051.01,"endTime":2056.08,"body":"do, and that is you take the"},{"speaker":"Spencer","startTime":2056.23,"endTime":2058.75,"body":"this. So this is a situation"},{"speaker":"Spencer","startTime":2056.23,"endTime":2058.75,"body":"where you know the finance team"},{"speaker":"Spencer","startTime":2058.78,"endTime":2061.71,"body":"is like, hey, we need new"},{"speaker":"Spencer","startTime":2058.78,"endTime":2061.71,"body":"accounting software, and then"},{"speaker":"Spencer","startTime":2061.95,"endTime":2064.2,"body":"they send it over to IT and"},{"speaker":"Spencer","startTime":2061.95,"endTime":2064.2,"body":"security, and you're like, \"Hey,"},{"speaker":"Spencer","startTime":2064.29,"endTime":2067.77,"body":"what do you think about this? So"},{"speaker":"Spencer","startTime":2064.29,"endTime":2067.77,"body":"IT security can take that,"},{"speaker":"Spencer","startTime":2068.16,"endTime":2070.59,"body":"evaluate it, figure out what"},{"speaker":"Spencer","startTime":2068.16,"endTime":2070.59,"body":"it's going to cost, how long"},{"speaker":"Spencer","startTime":2070.65,"endTime":2073.53,"body":"it's going to take, what the"},{"speaker":"Spencer","startTime":2070.65,"endTime":2073.53,"body":"impact is, what the trade-offs"},{"speaker":"Spencer","startTime":2073.74,"endTime":2076.95,"body":"are, and then they send that"},{"speaker":"Spencer","startTime":2073.74,"endTime":2076.95,"body":"back to leadership, right, and"},{"speaker":"Spencer","startTime":2076.98,"endTime":2080.45,"body":"to the the people who own that"},{"speaker":"Spencer","startTime":2076.98,"endTime":2080.45,"body":"project, and say, \"Yes, we can"},{"speaker":"Spencer","startTime":2080.48,"endTime":2084.32,"body":"do it. It's going to cost, you"},{"speaker":"Spencer","startTime":2080.48,"endTime":2084.32,"body":"know, $300,000. It's going to"},{"speaker":"Spencer","startTime":2084.32,"endTime":2087.56,"body":"take us six months to do. We're"},{"speaker":"Spencer","startTime":2084.32,"endTime":2087.56,"body":"going to not be able to do these"},{"speaker":"Spencer","startTime":2087.62,"endTime":2091.79,"body":"other projects that the business"},{"speaker":"Spencer","startTime":2087.62,"endTime":2091.79,"body":"wanted to do. Here's all the"},{"speaker":"Spencer","startTime":2091.82,"endTime":2094.4,"body":"parameters around this project"},{"speaker":"Spencer","startTime":2091.82,"endTime":2094.4,"body":"and what it means to the"},{"speaker":"Spencer","startTime":2094.46,"endTime":2097.16,"body":"business, and then let the"},{"speaker":"Spencer","startTime":2094.46,"endTime":2097.16,"body":"leadership and the business"},{"speaker":"Spencer","startTime":2097.22,"endTime":2100.3,"body":"leaders decide on that. Right?"},{"speaker":"Spencer","startTime":2097.22,"endTime":2100.3,"body":"Again, because they. The full"},{"speaker":"Spencer","startTime":2100.39,"endTime":2105.04,"body":"context of the business, get"},{"speaker":"Spencer","startTime":2100.39,"endTime":2105.04,"body":"that information for them, help"},{"speaker":"Spencer","startTime":2105.1,"endTime":2108.28,"body":"them understand what it's going"},{"speaker":"Spencer","startTime":2105.1,"endTime":2108.28,"body":"to cost, pass it back to them,"},{"speaker":"Spencer","startTime":2108.31,"endTime":2111.91,"body":"and say, \"You guys decide. We'll"},{"speaker":"Spencer","startTime":2108.31,"endTime":2111.91,"body":"do whatever you want. This is"},{"speaker":"Spencer","startTime":2112.03,"endTime":2113.77,"body":"what it's going to take from our"},{"speaker":"Spencer","startTime":2112.03,"endTime":2113.77,"body":"perspective."},{"speaker":"Brad Causey","startTime":2114.37,"endTime":2118.21,"body":"Yep. And if you"},{"speaker":"Brad Causey","startTime":2114.37,"endTime":2118.21,"body":"don't do that, then you're"},{"speaker":"Brad Causey","startTime":2118.33,"endTime":2123.54,"body":"creating a problem and an"},{"speaker":"Brad Causey","startTime":2118.33,"endTime":2123.54,"body":"opportunity for for conflict"},{"speaker":"Brad Causey","startTime":2123.57,"endTime":2126.27,"body":"between you and leadership,"},{"speaker":"Brad Causey","startTime":2123.57,"endTime":2126.27,"body":"right? And and so I think this"},{"speaker":"Brad Causey","startTime":2126.27,"endTime":2128.85,"body":"is a really important step. And"},{"speaker":"Brad Causey","startTime":2126.27,"endTime":2128.85,"body":"that managing up that I'm"},{"speaker":"Brad Causey","startTime":2128.94,"endTime":2132.45,"body":"talking about is like you know"},{"speaker":"Brad Causey","startTime":2128.94,"endTime":2132.45,"body":"again in the grand scheme of"},{"speaker":"Brad Causey","startTime":2132.51,"endTime":2135.81,"body":"things, here's how this fits."},{"speaker":"Brad Causey","startTime":2132.51,"endTime":2135.81,"body":"And and then once they're"},{"speaker":"Brad Causey","startTime":2135.93,"endTime":2138.63,"body":"educated and and armed with the"},{"speaker":"Brad Causey","startTime":2135.93,"endTime":2138.63,"body":"inadequate amount of"},{"speaker":"Brad Causey","startTime":2138.66,"endTime":2140.84,"body":"information, they can make it."},{"speaker":"Brad Causey","startTime":2138.66,"endTime":2140.84,"body":"They can make their decision,"},{"speaker":"Brad Causey","startTime":2141.08,"endTime":2141.23,"body":"right?"},{"speaker":"Spencer","startTime":2141.77,"endTime":2146.72,"body":"Yep. Okay. So, last"},{"speaker":"Spencer","startTime":2141.77,"endTime":2146.72,"body":"section for IT leaders, security"},{"speaker":"Spencer","startTime":2146.78,"endTime":2149.33,"body":"leaders, what do you what do"},{"speaker":"Spencer","startTime":2146.78,"endTime":2149.33,"body":"your teams need to be"},{"speaker":"Spencer","startTime":2149.45,"endTime":2154.46,"body":"successful? So, when I worked in"},{"speaker":"Spencer","startTime":2149.45,"endTime":2154.46,"body":"security, I was given a certain"},{"speaker":"Spencer","startTime":2154.46,"endTime":2157.67,"body":"amount of authority to affect"},{"speaker":"Spencer","startTime":2154.46,"endTime":2157.67,"body":"change. It was a small amount of"},{"speaker":"Spencer","startTime":2157.79,"endTime":2160.51,"body":"authority, right? But I was"},{"speaker":"Spencer","startTime":2157.79,"endTime":2160.51,"body":"given a small amount of"},{"speaker":"Spencer","startTime":2160.57,"endTime":2163.84,"body":"authority to to make certain"},{"speaker":"Spencer","startTime":2160.57,"endTime":2163.84,"body":"changes in the environment. I"},{"speaker":"Spencer","startTime":2163.9,"endTime":2167.02,"body":"think authority is a big one. I"},{"speaker":"Spencer","startTime":2163.9,"endTime":2167.02,"body":"think authority to make"},{"speaker":"Spencer","startTime":2167.08,"endTime":2171.22,"body":"decisions based on the IT"},{"speaker":"Spencer","startTime":2167.08,"endTime":2171.22,"body":"infrastructure, based on"},{"speaker":"Spencer","startTime":2171.28,"endTime":2176.11,"body":"security, is really important."},{"speaker":"Spencer","startTime":2171.28,"endTime":2176.11,"body":"So giving people the ability to"},{"speaker":"Spencer","startTime":2176.2,"endTime":2182.25,"body":"make those decisions, I think,"},{"speaker":"Spencer","startTime":2176.2,"endTime":2182.25,"body":"is really key. Budget, of"},{"speaker":"Spencer","startTime":2182.31,"endTime":2187.02,"body":"course. Like you only have what"},{"speaker":"Spencer","startTime":2182.31,"endTime":2187.02,"body":"you have, right? And there's a"},{"speaker":"Spencer","startTime":2187.08,"endTime":2190.17,"body":"certain amount of budget"},{"speaker":"Spencer","startTime":2187.08,"endTime":2190.17,"body":"allotted for IT and security"},{"speaker":"Spencer","startTime":2190.23,"endTime":2194.31,"body":"generally, and you have what you"},{"speaker":"Spencer","startTime":2190.23,"endTime":2194.31,"body":"have. But giving them enough to"},{"speaker":"Spencer","startTime":2195.12,"endTime":2197.43,"body":"adequately defend the"},{"speaker":"Spencer","startTime":2195.12,"endTime":2197.43,"body":"organization, right? Like you"},{"speaker":"Spencer","startTime":2197.55,"endTime":2203.48,"body":"can't defend an organization on"},{"speaker":"Spencer","startTime":2197.55,"endTime":2203.48,"body":"Peanuts, you you do need to"},{"speaker":"Spencer","startTime":2203.54,"endTime":2206.39,"body":"invest. Security is a cost"},{"speaker":"Spencer","startTime":2203.54,"endTime":2206.39,"body":"center. IT is a cost center."},{"speaker":"Spencer","startTime":2208.46,"endTime":2213.05,"body":"Sometimes people consider it"},{"speaker":"Spencer","startTime":2208.46,"endTime":2213.05,"body":"like a cost. What's the word for"},{"speaker":"Spencer","startTime":2213.77,"endTime":2217.7,"body":"it? A cost negator, like it"},{"speaker":"Spencer","startTime":2213.77,"endTime":2217.7,"body":"prevents you from losing, but"},{"speaker":"Spencer","startTime":2217.73,"endTime":2220.55,"body":"doesn't necessarily make you"},{"speaker":"Spencer","startTime":2217.73,"endTime":2220.55,"body":"money in most cases, right?"},{"speaker":"Spencer","startTime":2220.64,"endTime":2225.22,"body":"Unless you're a security vendor,"},{"speaker":"Spencer","startTime":2220.64,"endTime":2225.22,"body":"so budget's important. Team and"},{"speaker":"Spencer","startTime":2225.25,"endTime":2230.44,"body":"support are the last two. Having"},{"speaker":"Spencer","startTime":2225.25,"endTime":2230.44,"body":"a team, because everybody who's"},{"speaker":"Spencer","startTime":2230.53,"endTime":2233.44,"body":"been like a solo IT admin or"},{"speaker":"Spencer","startTime":2230.53,"endTime":2233.44,"body":"worked on a small team knows,"},{"speaker":"Spencer","startTime":2234.25,"endTime":2237.73,"body":"like a lot of the projects that"},{"speaker":"Spencer","startTime":2234.25,"endTime":2237.73,"body":"you're gonna run into are just"},{"speaker":"Spencer","startTime":2237.82,"endTime":2240.31,"body":"limited by time and resources."},{"speaker":"Spencer","startTime":2237.82,"endTime":2240.31,"body":"Like you just need multiple"},{"speaker":"Spencer","startTime":2240.4,"endTime":2243.3,"body":"bodies to to tackle them, and"},{"speaker":"Spencer","startTime":2240.4,"endTime":2243.3,"body":"you need support. Like you need"},{"speaker":"Spencer","startTime":2243.36,"endTime":2246.99,"body":"leadership support to get these"},{"speaker":"Spencer","startTime":2243.36,"endTime":2246.99,"body":"projects pushed through, to work"},{"speaker":"Spencer","startTime":2247.05,"endTime":2247.62,"body":"on these things."},{"speaker":"Brad Causey","startTime":2248.37,"endTime":2250.68,"body":"I want to add"},{"speaker":"Brad Causey","startTime":2248.37,"endTime":2250.68,"body":"something to the support piece,"},{"speaker":"Brad Causey","startTime":2250.89,"endTime":2254.34,"body":"right? Find a cybersecurity"},{"speaker":"Brad Causey","startTime":2250.89,"endTime":2254.34,"body":"vendor, and and and and I"},{"speaker":"Brad Causey","startTime":2254.43,"endTime":2256.65,"body":"realize this sounds"},{"speaker":"Brad Causey","startTime":2254.43,"endTime":2256.65,"body":"self-serving, but it's not"},{"speaker":"Brad Causey","startTime":2256.65,"endTime":2260.49,"body":"intended that way. I know,"},{"speaker":"Brad Causey","startTime":2256.65,"endTime":2260.49,"body":"right? But but find a trusted"},{"speaker":"Brad Causey","startTime":2260.76,"endTime":2263.93,"body":"cybersecurity vendor that you"},{"speaker":"Brad Causey","startTime":2260.76,"endTime":2263.93,"body":"can partner with that will help"},{"speaker":"Brad Causey","startTime":2264.05,"endTime":2269.18,"body":"you along this path, and and so"},{"speaker":"Brad Causey","startTime":2264.05,"endTime":2269.18,"body":"a big part of our role is"},{"speaker":"Brad Causey","startTime":2269.3,"endTime":2273.32,"body":"supporting our partners and our"},{"speaker":"Brad Causey","startTime":2269.3,"endTime":2273.32,"body":"clients in accomplishing their"},{"speaker":"Brad Causey","startTime":2273.38,"endTime":2277.31,"body":"goals while doing it from a"},{"speaker":"Brad Causey","startTime":2273.38,"endTime":2277.31,"body":"secure perspective. And and so"},{"speaker":"Brad Causey","startTime":2277.58,"endTime":2280.96,"body":"you know how often do we get on"},{"speaker":"Brad Causey","startTime":2277.58,"endTime":2280.96,"body":"kickoffs or report deliveries,"},{"speaker":"Brad Causey","startTime":2280.96,"endTime":2282.73,"body":"and you're like, hey, by the"},{"speaker":"Brad Causey","startTime":2280.96,"endTime":2282.73,"body":"way, three months from now we're"},{"speaker":"Brad Causey","startTime":2282.76,"endTime":2285.64,"body":"doing a new gold image, or you"},{"speaker":"Brad Causey","startTime":2282.76,"endTime":2285.64,"body":"know, we're going to migrate to"},{"speaker":"Brad Causey","startTime":2286.03,"endTime":2288.85,"body":"a hybrid implementation of"},{"speaker":"Brad Causey","startTime":2286.03,"endTime":2288.85,"body":"Active Directory. Like, how can"},{"speaker":"Brad Causey","startTime":2288.85,"endTime":2291.25,"body":"we make sure we don't step on"},{"speaker":"Brad Causey","startTime":2288.85,"endTime":2291.25,"body":"our own feet when we do that?"},{"speaker":"Brad Causey","startTime":2292.24,"endTime":2295.45,"body":"And and so we're happy to help"},{"speaker":"Brad Causey","startTime":2292.24,"endTime":2295.45,"body":"with those things. So you know,"},{"speaker":"Brad Causey","startTime":2295.75,"endTime":2298.27,"body":"having an outside third party"},{"speaker":"Brad Causey","startTime":2295.75,"endTime":2298.27,"body":"that you can lean on a little"},{"speaker":"Brad Causey","startTime":2298.33,"endTime":2301.98,"body":"bit to ask those questions to"},{"speaker":"Brad Causey","startTime":2298.33,"endTime":2301.98,"body":"support you in these endeavors"},{"speaker":"Brad Causey","startTime":2302.49,"endTime":2304.8,"body":"is going to be very beneficial"},{"speaker":"Brad Causey","startTime":2302.49,"endTime":2304.8,"body":"to you. They're also going to"},{"speaker":"Brad Causey","startTime":2304.8,"endTime":2308.16,"body":"help you when we start talking"},{"speaker":"Brad Causey","startTime":2304.8,"endTime":2308.16,"body":"about building what you were"},{"speaker":"Brad Causey","startTime":2308.22,"endTime":2310.35,"body":"talking about is the cost"},{"speaker":"Brad Causey","startTime":2308.22,"endTime":2310.35,"body":"assessment to do something"},{"speaker":"Brad Causey","startTime":2310.41,"endTime":2313.95,"body":"securely. Like, yeah, dude, I'm"},{"speaker":"Brad Causey","startTime":2310.41,"endTime":2313.95,"body":"an I'm I'm an I'm an IT"},{"speaker":"Brad Causey","startTime":2314.01,"endTime":2316.23,"body":"engineer. I'm not doing a pen"},{"speaker":"Brad Causey","startTime":2314.01,"endTime":2316.23,"body":"test on this web app that"},{"speaker":"Brad Causey","startTime":2316.26,"endTime":2319.38,"body":"accounting wants to buy. That's"},{"speaker":"Brad Causey","startTime":2316.26,"endTime":2319.38,"body":"going to get rolled into the"},{"speaker":"Brad Causey","startTime":2319.5,"endTime":2323.06,"body":"cost, and so somebody that you"},{"speaker":"Brad Causey","startTime":2319.5,"endTime":2323.06,"body":"can lean on to help you build"},{"speaker":"Brad Causey","startTime":2323.09,"endTime":2325.79,"body":"those cost estimates is going to"},{"speaker":"Brad Causey","startTime":2323.09,"endTime":2325.79,"body":"be important, as opposed to,"},{"speaker":"Brad Causey","startTime":2326.21,"endTime":2328.88,"body":"hey, we should probably get a"},{"speaker":"Brad Causey","startTime":2326.21,"endTime":2328.88,"body":"pen test, right? What does that"},{"speaker":"Brad Causey","startTime":2328.94,"endTime":2333.05,"body":"even mean in the in the scheme"},{"speaker":"Brad Causey","startTime":2328.94,"endTime":2333.05,"body":"of this project? And so, you"},{"speaker":"Brad Causey","startTime":2333.08,"endTime":2335.54,"body":"know, it would be beneficial for"},{"speaker":"Brad Causey","startTime":2333.08,"endTime":2335.54,"body":"all the reasons we talked about"},{"speaker":"Brad Causey","startTime":2335.54,"endTime":2337.79,"body":"at the very beginning. At the"},{"speaker":"Brad Causey","startTime":2335.54,"endTime":2337.79,"body":"rate that it's literally our job"},{"speaker":"Brad Causey","startTime":2337.82,"endTime":2340.42,"body":"to keep up with that stuff."},{"speaker":"Brad Causey","startTime":2337.82,"endTime":2340.42,"body":"Doesn't have to be us. Go find"},{"speaker":"Brad Causey","startTime":2340.45,"endTime":2343.72,"body":"somebody that you like and you"},{"speaker":"Brad Causey","startTime":2340.45,"endTime":2343.72,"body":"trust that that can partner with"},{"speaker":"Brad Causey","startTime":2343.81,"endTime":2345.19,"body":"you to help you solve some of"},{"speaker":"Brad Causey","startTime":2343.81,"endTime":2345.19,"body":"these problems."},{"speaker":"Spencer","startTime":2345.94,"endTime":2346.48,"body":"100%"},{"speaker":"Brad Causey","startTime":2347.74,"endTime":2349.33,"body":"All right, folks,"},{"speaker":"Brad Causey","startTime":2347.74,"endTime":2349.33,"body":"that's all we have time for"},{"speaker":"Brad Causey","startTime":2349.39,"endTime":2352.78,"body":"today. Thank you for watching in"},{"speaker":"Brad Causey","startTime":2349.39,"endTime":2352.78,"body":"or listening. If you like what"},{"speaker":"Brad Causey","startTime":2352.78,"endTime":2355.72,"body":"you hear, give us a like, leave"},{"speaker":"Brad Causey","startTime":2352.78,"endTime":2355.72,"body":"a comment. You guys have been"},{"speaker":"Brad Causey","startTime":2355.87,"endTime":2358.57,"body":"awesome in the comment sections"},{"speaker":"Brad Causey","startTime":2355.87,"endTime":2358.57,"body":"over multiple platforms, so keep"},{"speaker":"Brad Causey","startTime":2358.63,"endTime":2361.71,"body":"that stuff coming. We really"},{"speaker":"Brad Causey","startTime":2358.63,"endTime":2361.71,"body":"appreciate that. It helps us"},{"speaker":"Brad Causey","startTime":2361.83,"endTime":2364.2,"body":"with the algorithm and putting"},{"speaker":"Brad Causey","startTime":2361.83,"endTime":2364.2,"body":"our podcast in front of other"},{"speaker":"Brad Causey","startTime":2364.29,"endTime":2366.81,"body":"people. So keep that going, and"},{"speaker":"Brad Causey","startTime":2364.29,"endTime":2366.81,"body":"we'll see you guys next week."}]}