In this episode of CISO Tradecraft, host G Mark Hardy welcomes Richard Stiennon, an industry analyst and cybersecurity expert. Together, they delve into the reasons why Chief Information Security Officers (CISOs) often miss upcoming security challenges and discuss actionable solutions. Richard shares his extensive background, including his time at Gartner, his founding of IT Harvest, and his work on the Security Yearbook. The conversation also explores the rapid growth of AI in cybersecurity, the challenges of understanding the market, and the future landscape of cybersecurity technologies. This episode provides valuable insights for CISOs looking to stay ahead in an ever-evolving industry.

In this episode of CISO Tradecraft, hosts G Mark Hardy and Ross Young discuss the extensive redesign at CISO Tradecraft and introduce a series of free cybersecurity tools and templates available on their website. The tools, created with the help of AI, range from a Cybersecurity Budget Template and Gen AI Risk Assessment to a Personal Values Exercise and Process Improvement exercise. They also cover topics such as AI coding, CMMC Compliance, Cloud Security Alliance’s AI Control Matrix, and the Cyber Six Pack for improving vulnerability management. Additionally, they share insights on tools rationalization exercises, such as the cybersecurity murder board, and the importance of aligning tasks with personal values. Tune in for detailed walkthroughs of these innovative resources designed to enhance your cybersecurity strategies without breaking the bank.

Templates can be found here:

https://www.cisotradecraft.com/freetemplates

Most cybersecurity programs are built on rigid “best practices” that assume people will behave rationally, consistently, and exactly as policy dictates; even under stress, time pressure, and uncertainty. In reality, humans don’t work that way. Cognitive bias, fatigue, incentives, and real-world constraints cause well-intentioned employees, analysts, and leaders to make decisions that quietly undermine security. The result? Incident response stalls, SOCs drown in noise, and organizations continue to repeat the same failures, even while believing they’re “doing everything right.” In this episode of CISO Tradecraft, host G. Mark Hardy and Dr. Dustin Sachs demonstrate how applying behavioral science and human decision-making can radically improve cybersecurity outcomes. By designing security around how people actually think and operate, not how policies assume they do, leaders can build adaptable, resilient programs that work in the real world.

Check out Dustin's new book: https://www.amazon.com/Behavioral-Insights-Cybersecurity-Security-Leadership/dp/1032998539

Dustin Sachs's Linkedin Profile: https://www.linkedin.com/in/dustinsachs/