Shows
CISO Tradecraft®#272 - Data Centric Platform Play (with EJ Pappas)In this episode of CISO Tradecraft, host G Mark Hardy speaks with EJ Pappas of PKWARE and Ross Young about why AI-driven threats demand a shift from platform-centric security to a data-centric strategy.CISOs still struggle to answer, “Where is our sensitive data?” as it sprawls across AI, endpoints, cloud, SaaS, and shared environments. In this conversation, we explore: Why CISOs still struggle with data visibility How vendor sprawl and fragmented toolsets create blind spots The difference between structured and unstructured data risk Why AI accelerates both defense and mistakes DLP vs. encryption: complementary, not competing cont...
2026-02-2359 min
CISO Tradecraft®#265 - 12 CISO Templates (with Ross Young)In this episode of CISO Tradecraft, hosts G Mark Hardy and Ross Young discuss the extensive redesign at CISO Tradecraft and introduce a series of free cybersecurity tools and templates available on their website. The tools, created with the help of AI, range from a Cybersecurity Budget Template and Gen AI Risk Assessment to a Personal Values Exercise and Process Improvement exercise. They also cover topics such as AI coding, CMMC Compliance, Cloud Security Alliance’s AI Control Matrix, and the Cyber Six Pack for improving vulnerability management. Additionally, they share insights on tools rationalization exercises, such as the cy...
2025-12-2945 min
CISO Tradecraft®#262 - AI Mastery for CISOs: What You Must KnowDive into the rapidly evolving world of AI with G Mark Hardy and Ross Young in this episode of CISO Tradecraft. Explore how AI is transforming business processes, the critical need for cybersecurity leadership in AI deployments, and the importance of setting clear goals, monitoring performance, and ensuring data quality. Learn about the different types of AI from traditional to generative and agentic AI, and understand the frameworks and risk assessments shaping the future of AI integration in organizations. Don't miss this essential conversation for cybersecurity leaders looking to stay ahead of the curve. Generative...
2025-12-0846 min
Buyers Box PodcastEP 4: Ross Hardy Reveals How "A Simple YouTube Method" Converts 5x Better Than Your CRM Follow-UpsIn this episode of The Buyer’s Box Podcast, host Ally Burnett sits down with Ross Hardy, a 20-year real estate veteran and team leader who built one of the most effective YouTube lead funnels in Florida. Ross shares exactly how long-form video became his highest-intent lead source, even in a town of only 8,000 people, and why agents who ignore YouTube are leaving business on the table. Whether you’re a new agent starting from scratch or a team leader looking to scale your brand authority, this episode gives you a simple, duplicable roadmap for using YouTube to at...
2025-11-2820 min
CISO Tradecraft®#257 - Patch or Perish (with Ross Young)Imagine stepping into a role and discovering your predecessor had been severely underreporting vulnerabilities, leaving your systems 300 days behind on patches. Join G Mark Hardy and Ross Young in this riveting episode of CISO Tradecraft as they unveil a startling real-world scenario and a proven strategy to revolutionize your patching process. Learn how to tackle the ever-growing number of vulnerabilities, leverage AI and automation, and instill a culture of accountability and gamification among your team. With expert insights and practical steps, this episode is a must-watch for every cybersecurity leader looking to stay ahead of threats and secure their...
2025-11-0327 min
CISO Tradecraft®#256 - Maximize Your Cybersecurity Budgets (with Ross Young)In this episode of CISO Tradecraft, G Mark Hardy and Ross Young dive into part two of their series on cybersecurity budgets. Continuing from where they left off, they discuss the OWASP Threat and Safeguard Matrix (TaSM), effective protection scoring, and practical strategies to enhance your budget management as a CISO. Learn about the importance of understanding material threats, leveraging AI, and employing tools like murder boards to optimize security practices. Ross also shares inside tips for negotiating master service agreements and improving organizational processes, all aimed at making you a more effective security leader.
2025-10-2744 min
CISO Tradecraft®#255 - Maximize the Outcomes Per Dollar in Cyber (with Ross Young)Welcome to another episode of CISO Tradecraft! Join G Mark Hardy and Ross Young as they dive deep into strategies for maximizing your security budget while minimizing waste. Ross, the author of the soon-to-be-released 'Cybersecurity's Dirty Secret,' shares insights from his 20-year career, including his time at the CIA, Capital One, and Caterpillar Financial. Get expert tips on zero-based budgeting, total cost of ownership, avoiding meeting waste, and more. Don't miss this episode if you want to learn how to make every cybersecurity dollar count!Free Templates: https://www.cisotradecraft.com/storeCourse: https...
2025-10-2045 min
CISO Tradecraft®#255 - Maximize the Outcomes Per Dollar in Cyber (with Ross Young)Welcome to another episode of CISO Tradecraft! Join G Mark Hardy and Ross Young as they dive deep into strategies for maximizing your security budget while minimizing waste. Ross, the author of the soon-to-be-released 'Cybersecurity's Dirty Secret,' shares insights from his 20-year career, including his time at the CIA, Capital One, and Caterpillar Financial. Get expert tips on zero-based budgeting, total cost of ownership, avoiding meeting waste, and more. Don't miss this episode if you want to learn how to make every cybersecurity dollar count!
Free Templates: https://www.cisotradecraft.com/store
Course: https...
2025-10-2045 min
Reside Platform PodcastUsing YouTube, Zillow Flex & Indeed to Build a Powerhouse Real Estate Team with Ross HardySuneet sits down with Ross Hardy, leader of the Hardy Team in Spring Hill and Brooksville, Florida, and coach at Reside Platform. Ross shares his journey from skeptic to believer in simple recruiting tactics, reveals how his team dominates with Zillow Flex and YouTube, and offers no-nonsense advice for team leaders looking to scale their businesses. Chapters00:00:00 - Welcome and Intro00:04:46 - Top Recruiting Lever: Indeed Ads00:09:37 - First Recruiting Advice for Coaching Clients00:11:14 - The One Minute Email Tip Strategy00:19:09 - Lead Generation: Zillow F...
2025-10-1632 min
CISO Tradecraft®#242 - The Secret to Career Success: Your Personal Board of DirectorsIn this episode of CISO Tradecraft, co-host G Mark Hardy and guest Ross Young explore the concept of having a personal board of directors. Learn how to leverage mentors, coaches, and role models to gain diverse perspectives and valuable advice for your professional growth as a cybersecurity leader. Discover the importance of building authentic relationships and seeking advice from experienced individuals, and understand how to make informed career decisions. Tune in to hear practical tips on creating and maintaining your own board of directors, and how it can elevate your career in cybersecurity.
Helpful Reading
...
2025-07-2145 min
CISO Tradecraft®#242 - The Secret to Career Success: Your Personal Board of DirectorsIn this episode of CISO Tradecraft, co-host G Mark Hardy and guest Ross Young explore the concept of having a personal board of directors. Learn how to leverage mentors, coaches, and role models to gain diverse perspectives and valuable advice for your professional growth as a cybersecurity leader. Discover the importance of building authentic relationships and seeking advice from experienced individuals, and understand how to make informed career decisions. Tune in to hear practical tips on creating and maintaining your own board of directors, and how it can elevate your career in cybersecurity.
Helpful Reading
...
2025-07-2145 minCISO Tradecraft®#241 - The OWASP Threat and Safeguard Matrix (with Ross Young)Join G Mark Hardy in this special episode of CISO Tradecraft as he interviews Ross Young, the creator of the OWASP Threat and Safeguard Matrix (TaSM). Ross shares his extensive cybersecurity background and discusses the development and utility of the TaSM, including its applications in threat modeling and risk management. Additionally, Ross introduces his upcoming book, 'Cybersecurity's Dirty Secret: How Most Budgets Are Wasted,' and provides insights on maximizing cybersecurity budgets. Don't miss this episode for essential knowledge on enhancing your cybersecurity leadership and strategies.
OWASP Threat and Safeguard Matrix - https://owasp.org/w...
2025-07-1425 min
CISO Tradecraft®#241 - The OWASP Threat and Safeguard Matrix (with Ross Young)Join G Mark Hardy in this special episode of CISO Tradecraft as he interviews Ross Young, the creator of the OWASP Threat and Safeguard Matrix (TaSM). Ross shares his extensive cybersecurity background and discusses the development and utility of the TaSM, including its applications in threat modeling and risk management. Additionally, Ross introduces his upcoming book, 'Cybersecurity's Dirty Secret: How Most Budgets Are Wasted,' and provides insights on maximizing cybersecurity budgets. Don't miss this episode for essential knowledge on enhancing your cybersecurity leadership and strategies.
OWASP Threat and Safeguard Matrix - https://owasp.org/w...
2025-07-1425 minCISO Tradecraft®#234 - Model Context Protocol (MCP)In this episode of CISO Tradecraft, host G Mark Hardy delves into the emerging concept of Model Context Protocol (MCP) and its significance in AI and enterprise security. Launched by Anthropic in November 2024, MCP is designed to standardize how AI systems interact with external data sources and applications. Hardy explores how MCP differs from traditional APIs, its implications for security, and the steps organizations need to take to prepare for its adoption. Key topics include the stateful nature of MCP, security risks such as prompt injection and tool poisoning, and the importance of developing a robust governance framework. By...
2025-05-2632 min
CISO Tradecraft®#234 - Model Context Protocol (MCP)In this episode of CISO Tradecraft, host G Mark Hardy delves into the emerging concept of Model Context Protocol (MCP) and its significance in AI and enterprise security. Launched by Anthropic in November 2024, MCP is designed to standardize how AI systems interact with external data sources and applications. Hardy explores how MCP differs from traditional APIs, its implications for security, and the steps organizations need to take to prepare for its adoption. Key topics include the stateful nature of MCP, security risks such as prompt injection and tool poisoning, and the importance of developing a robust governance framework. By...
2025-05-2632 minCISO Tradecraft®#222 - 40 Years of Career Advice in 40 MinutesIn this episode of CISO Tradecraft, G. Mark Hardy shares 15 crucial characteristics to help you succeed in your cybersecurity career and become an effective CISO. From knowing yourself and developing leadership skills to enhancing communications and staying current with trends, Hardy distills decades of wisdom into practical advice. Learn how to navigate career transitions, build technical credibility, become an effective storyteller, and master political skills essential for C-level success.
Transcripts:
https://docs.google.com/document/d/1MpjXD8LqnHS_Lj1S-6T7vxcclxzUjEhe
Chapters
01:30 Know Yourself: The First Step to Success
05:23 Develop Y...
2025-03-0340 min
CISO Tradecraft®#222 - 40 Years of Career Advice in 40 MinutesIn this episode of CISO Tradecraft, G. Mark Hardy shares 15 crucial characteristics to help you succeed in your cybersecurity career and become an effective CISO. From knowing yourself and developing leadership skills to enhancing communications and staying current with trends, Hardy distills decades of wisdom into practical advice. Learn how to navigate career transitions, build technical credibility, become an effective storyteller, and master political skills essential for C-level success.
Transcripts:
https://docs.google.com/document/d/1MpjXD8LqnHS_Lj1S-6T7vxcclxzUjEhe
Chapters
01:30 Know Yourself: The First Step to Success
05:23 Develop Your L...
2025-03-0340 minCISO Tradecraft®#215 - CISO Predictions for 2025In this episode of CISO Tradecraft, host G Mark Hardy explores the top 10 cybersecurity predictions for 2025. From the rise of AI influencers to new standards in encryption, Hardy discusses significant trends and changes expected in the cybersecurity landscape. The episode delves into topics such as branding, application security, browser-based security, and post-quantum cryptography, aiming to prepare listeners for future challenges and advancements in the field.
Big Thanks to our Sponsor
CruiseCon - https://cruisecon.com/
CruiseCon Discount Code: CISOTRADECRAFT10
Team8 Fixing AppSec Paper - https://bunny-wp-pullzone-pqzn4foj9c...
2025-01-1318 min
CISO Tradecraft®#215 - CISO Predictions for 2025In this episode of CISO Tradecraft, host G Mark Hardy explores the top 10 cybersecurity predictions for 2025. From the rise of AI influencers to new standards in encryption, Hardy discusses significant trends and changes expected in the cybersecurity landscape. The episode delves into topics such as branding, application security, browser-based security, and post-quantum cryptography, aiming to prepare listeners for future challenges and advancements in the field.
Big Thanks to our Sponsor
CruiseCon - https://cruisecon.com/
CruiseCon Discount Code: CISOTRADECRAFT10
Team8 Fixing AppSec Paper - https://bunny-wp-pullzone-pqzn4foj9c...
2025-01-1318 minCISO Tradecraft®#213 - How to Build a Successful Cybersecurity Startup (with Ross Haleliuk)In this episode of CISO Tradecraft, host G Mark Hardy interviews Ross Haleliuk, author of 'Cyber for Builders: The Essential Guide to Building a Cybersecurity Startup.' Ross shares valuable insights on starting a cybersecurity company, and emphasizes the importance of understanding market needs, customer engagement, and trust in the industry. They discuss the role of angel investors, the differences between product and service companies, and the challenges founders face. The episode also includes an announcement about CISO Tradecraft's partnership with CruiseCon for an upcoming cybersecurity conference. Additionally, Ross provides a glimpse into his non-traditional background and journey into...
2024-12-3045 min
CISO Tradecraft®#213 - How to Build a Successful Cybersecurity Startup (with Ross Haleliuk)In this episode of CISO Tradecraft, host G Mark Hardy interviews Ross Haleliuk, author of 'Cyber for Builders: The Essential Guide to Building a Cybersecurity Startup.' Ross shares valuable insights on starting a cybersecurity company, and emphasizes the importance of understanding market needs, customer engagement, and trust in the industry. They discuss the role of angel investors, the differences between product and service companies, and the challenges founders face. The episode also includes an announcement about CISO Tradecraft's partnership with CruiseCon for an upcoming cybersecurity conference. Additionally, Ross provides a glimpse into his non-traditional background and journey into...
2024-12-3045 min
CISO Tradecraft®#202 - Cybersecurity Crisis: Are We Failing the Next Generation?In this episode of CISO Tradecraft, host G Mark Hardy explores the challenges and misconceptions facing the next generation of cybersecurity professionals. The discussion covers the myth of a talent shortage, the shortcomings of current educational and certification programs, and the significance of aligning curricula with real-world needs. Hardy emphasizes the importance of hands-on experience, developing soft skills, and fostering continuous learning. The episode also highlights strategies for retaining talent, promoting internal training, and creating leadership opportunities to cultivate a skilled and satisfied cybersecurity workforce.
Transcripts: https://docs.google.com/document/d/12fI2efHXuHR4dS3cu7P0...
2024-10-1445 minCISO Tradecraft®#202 - Cybersecurity Crisis: Are We Failing the Next Generation?In this episode of CISO Tradecraft, host G Mark Hardy explores the challenges and misconceptions facing the next generation of cybersecurity professionals. The discussion covers the myth of a talent shortage, the shortcomings of current educational and certification programs, and the significance of aligning curricula with real-world needs. Hardy emphasizes the importance of hands-on experience, developing soft skills, and fostering continuous learning. The episode also highlights strategies for retaining talent, promoting internal training, and creating leadership opportunities to cultivate a skilled and satisfied cybersecurity workforce.
Transcripts: https://docs.google.com/document/d/12fI2efHXuHR4dS3cu7P0...
2024-10-1445 min
CISO Tradecraft®#188 - Securing Small BusinessesSecuring Small Businesses: Essential Cybersecurity Tools and Strategies In this episode of CISO Tradecraft, host G Mark Hardy discusses cybersecurity challenges specific to small businesses. He provides insights into key tools and strategies needed for effective cybersecurity management in small enterprises, including endpoint management, patch management, EDR tools, secure web gateways, IAM solutions, email security gateways, MDR services, and password managers. Hardy also evaluates these tools against the CIS Critical Security Controls to highlight their significance in safeguarding small business operations.
Transcripts: https://docs.google.com/document/d/1Hon3h950myI7A3jzGmj7YIwRXow5W1V5
2024-07-0825 minCISO Tradecraft®#188 - Securing Small BusinessesSecuring Small Businesses: Essential Cybersecurity Tools and Strategies In this episode of CISO Tradecraft, host G Mark Hardy discusses cybersecurity challenges specific to small businesses. He provides insights into key tools and strategies needed for effective cybersecurity management in small enterprises, including endpoint management, patch management, EDR tools, secure web gateways, IAM solutions, email security gateways, MDR services, and password managers. Hardy also evaluates these tools against the CIS Critical Security Controls to highlight their significance in safeguarding small business operations.
Transcripts: https://docs.google.com/document/d/1Hon3h950myI7A3jzGmj7YIwRXow5W1V5
2024-07-0825 min
CISO Tradecraft®#181 - Inside the 2024 Verizon Data Breach Investigations ReportIn this episode of CISO Tradecraft, host G Mark Hardy discusses the findings of the 2024 Verizon Data Breach Investigations Report (DBIR), covering over 10,000 breaches. Beginning with a brief history of the DBIR's inception in 2008, Hardy highlights the evolution of cyber threats, such as the significance of patching vulnerabilities and the predominance of hacking and malware. The report identifies the top methods bad actors use for exploiting companies, including attacking VPNs, desktop sharing software, web applications, conducting phishing, and stealing credentials, emphasizing the growing sophistication of attacks facilitated by technology like ChatGPT for phishing and deepfake tech for social engineering...
2024-05-1324 minCISO Tradecraft®#181 - Inside the 2024 Verizon Data Breach Investigations ReportIn this episode of CISO Tradecraft, host G Mark Hardy discusses the findings of the 2024 Verizon Data Breach Investigations Report (DBIR), covering over 10,000 breaches. Beginning with a brief history of the DBIR's inception in 2008, Hardy highlights the evolution of cyber threats, such as the significance of patching vulnerabilities and the predominance of hacking and malware. The report identifies the top methods bad actors use for exploiting companies, including attacking VPNs, desktop sharing software, web applications, conducting phishing, and stealing credentials, emphasizing the growing sophistication of attacks facilitated by technology like ChatGPT for phishing and deepfake tech for social engineering...
2024-05-1324 min
CISO Tradecraft®#179 - The 7 Broken Pillars of CybersecurityIn this episode of CISO Tradecraft, host G. Mark Hardy discusses seven critical issues facing the cybersecurity industry, offering a detailed analysis of each problem along with counterarguments. The concerns range from the lack of a unified cybersecurity license, the inefficiency and resource waste caused by auditors, to the need for a federal data privacy law. Hardy emphasizes the importance of evaluating policies, prioritizing effective controls, and examining current industry practices. He challenges the audience to think about solutions and encourages sharing opinions and additional concerns, aiming to foster a deeper understanding and improvement within the field of cybersecurity.
2024-04-2932 minCISO Tradecraft®#179 - The 7 Broken Pillars of CybersecurityIn this episode of CISO Tradecraft, host G. Mark Hardy discusses seven critical issues facing the cybersecurity industry, offering a detailed analysis of each problem along with counterarguments. The concerns range from the lack of a unified cybersecurity license, the inefficiency and resource waste caused by auditors, to the need for a federal data privacy law. Hardy emphasizes the importance of evaluating policies, prioritizing effective controls, and examining current industry practices. He challenges the audience to think about solutions and encourages sharing opinions and additional concerns, aiming to foster a deeper understanding and improvement within the field of cybersecurity.
2024-04-2932 minCISO Tradecraft®#175 - Navigating NYDFS Cyber RegulationThis episode of CISO Tradecraft dives deep into the New York Department of Financial Services Cybersecurity Regulation, known as Part 500. Hosted by G Mark Hardy, the podcast outlines the significance of this regulation for financial services companies and beyond. Hardy emphasizes that Part 500 serves as a high-level framework applicable not just in New York or the financial sector but across various industries globally due to its comprehensive cybersecurity requirements. The discussion includes an overview of the regulation's history, amendments to enhance governance and incident response, and a detailed analysis of key sections such as multi-factor authentication, audit trails, access...
2024-04-0133 min
CISO Tradecraft®#175 - Navigating NYDFS Cyber RegulationThis episode of CISO Tradecraft dives deep into the New York Department of Financial Services Cybersecurity Regulation, known as Part 500. Hosted by G Mark Hardy, the podcast outlines the significance of this regulation for financial services companies and beyond. Hardy emphasizes that Part 500 serves as a high-level framework applicable not just in New York or the financial sector but across various industries globally due to its comprehensive cybersecurity requirements. The discussion includes an overview of the regulation's history, amendments to enhance governance and incident response, and a detailed analysis of key sections such as multi-factor authentication, audit trails, access...
2024-04-0133 min
Pembury Baptist Church PodcastLiving in God's Fullness - Ross Hardy 17/03/2024At Pembury Baptist Church on 17th March 2024, Ross Hardy from Eastgate spoke from Colossians 2:6-15, on living in God's fullness. This podcast features prophetic words at the end of the sermon from the Eastgate team.
2024-03-1859 min
CISO Tradecraft®#173 - Mastering Vulnerability ManagementIn this episode of CISO Tradecraft, host G Mark Hardy delves into the critical subject of vulnerability management for cybersecurity leaders. The discussion begins with defining the scope and importance of vulnerability management, referencing Park Foreman's comprehensive approach beyond mere patching, to include identification, classification, prioritization, remediation, and mitigation of software vulnerabilities. Hardy emphasizes the necessity of a strategic vulnerability management program to prevent exploitations by bad actors, illustrating how vulnerabilities are exploited using tools like ExploitDB, Metasploit, and Shodan. He advises on deploying a variety of scanning tools to uncover different types of vulnerabilities across operating systems, middleware...
2024-03-1822 minCISO Tradecraft®#173 - Mastering Vulnerability ManagementIn this episode of CISO Tradecraft, host G Mark Hardy delves into the critical subject of vulnerability management for cybersecurity leaders. The discussion begins with defining the scope and importance of vulnerability management, referencing Park Foreman's comprehensive approach beyond mere patching, to include identification, classification, prioritization, remediation, and mitigation of software vulnerabilities. Hardy emphasizes the necessity of a strategic vulnerability management program to prevent exploitations by bad actors, illustrating how vulnerabilities are exploited using tools like ExploitDB, Metasploit, and Shodan. He advises on deploying a variety of scanning tools to uncover different types of vulnerabilities across operating systems, middleware...
2024-03-1822 minCISO Tradecraft®#171 - Navigating Software Supply Chain Security (with Cassie Crossley)In this episode of CISO Tradecraft, host G Mark Hardy converses with Cassie Crossley, author of the book on software supply chain security. Hardy explores the importance of cybersecurity, the structure of software supply chains, and the potential risks they pose. Crossley shares her expert insights on different software source codes and the intricacies of secure development life cycle. She highlights the significance of Software Bill of Materials (SBOM) and the challenges in maintaining the integrity of software products. The discussion also covers the concept of counterfeits in the software world, stressing the need for continuous monitoring and a...
2024-03-0446 min
CISO Tradecraft®#171 - Navigating Software Supply Chain Security (with Cassie Crossley)In this episode of CISO Tradecraft, host G Mark Hardy converses with Cassie Crossley, author of the book on software supply chain security. Hardy explores the importance of cybersecurity, the structure of software supply chains, and the potential risks they pose. Crossley shares her expert insights on different software source codes and the intricacies of secure development life cycle. She highlights the significance of Software Bill of Materials (SBOM) and the challenges in maintaining the integrity of software products. The discussion also covers the concept of counterfeits in the software world, stressing the need for continuous monitoring and a...
2024-03-0446 min
CISO Tradecraft®#163 - Operational ResilienceJoin G Mark Hardy in this episode of the CISO Tradecraft podcast where he details how cyber protects revenue. He clarifies how cybersecurity is seen as a cost center by most organizations, but stresses how it can become a protector of business profits. Concepts like Operational Resilience Framework (ORF) Version 2 by the Global Resilience Federation are discussed in depth. Hardy also outlines seven steps from ORF to operational resilience including implementing industry-recognized frameworks, understanding the organization's role in the ecosystem, defining viable service levels, and more.
Link to the ORF - https://www.grf.org/or...
2024-01-0823 minCISO Tradecraft®#163 - Operational ResilienceJoin G Mark Hardy in this episode of the CISO Tradecraft podcast where he details how cyber protects revenue. He clarifies how cybersecurity is seen as a cost center by most organizations, but stresses how it can become a protector of business profits. Concepts like Operational Resilience Framework (ORF) Version 2 by the Global Resilience Federation are discussed in depth. Hardy also outlines seven steps from ORF to operational resilience including implementing industry-recognized frameworks, understanding the organization's role in the ecosystem, defining viable service levels, and more.
Link to the ORF - https://www.grf.org/or...
2024-01-0823 min
CISO Tradecraft®#161 - Secure Developer Training Programs (with Scott Russo) Part 2In the second half of the discussion about secure developer training programs, G Mark Hardy and Scott Russo delve deeper into how to engineer an effective cybersecurity course. They discuss the importance and impact of automation and shifting left, the customization needed for different programming languages and practices, and the role of gamification in engagement and learning. The conversation also touches upon anticipating secular trends, compliance with privacy and data protection regulations, different leaning styles and preferences, and effective strategies to enhance courses based on participant feedback. Scott highlights the lasting impacts and future implications of secure developer training...
2023-12-2545 minCISO Tradecraft®#161 - Secure Developer Training Programs (with Scott Russo) Part 2In the second half of the discussion about secure developer training programs, G Mark Hardy and Scott Russo delve deeper into how to engineer an effective cybersecurity course. They discuss the importance and impact of automation and shifting left, the customization needed for different programming languages and practices, and the role of gamification in engagement and learning. The conversation also touches upon anticipating secular trends, compliance with privacy and data protection regulations, different leaning styles and preferences, and effective strategies to enhance courses based on participant feedback. Scott highlights the lasting impacts and future implications of secure developer training...
2023-12-2545 min
General Witchfinders: The British Horror Podcast41a - BBC Ghost Stories for Christmas: The Stalls of BarchesterThe Stalls of Barchester was first broadcast on BBC 1 at 11:00 pm on December 24, 1971. It is based on the story "The Stalls of Barchester Cathedral" from the 1911 collection More Ghost Stories by M. R. James, it was adapted, produced, and directed by Lawrence Gordon Clark, who directed every BBC Ghost Stories for Christmas between 1971 and 1977. Can you name them all, Jon?The Stalls of Barchester (1971)A Warning to the Curious (1972)Lost Hearts (1973)The Treasure of Abbot Thomas (1974)The Ash Tree (1975)The Signalman (1976)Stigma (1977)The cast of The Stalls of Barchester includes several actors now better known for their...
2023-12-241h 06CISO Tradecraft®#160 - Secure Developer Training Programs (with Scott Russo) Part 1In this episode of CISO Tradecraft, host G Mark Hardy invites Scott Russo, a cybersecurity and engineering expert for a deep dive into the creation and maintenance of secure developer training programs. Scott discusses the importance of hands-on engaging training and the intersection of cybersecurity with teaching and mentorship. Scott shares his experiences building a secure developer training program, emphasizing the importance of gamification, tiered training, showmanship, and real-world examples to foster engagement and efficient learning. Note this episode will continue in with a part two in the next episode
ISACA Event (10 Jan 2024) With G Mark Hardy...
2023-12-1842 min
CISO Tradecraft®#160 - Secure Developer Training Programs (with Scott Russo) Part 1In this episode of CISO Tradecraft, host G Mark Hardy invites Scott Russo, a cybersecurity and engineering expert for a deep dive into the creation and maintenance of secure developer training programs. Scott discusses the importance of hands-on engaging training and the intersection of cybersecurity with teaching and mentorship. Scott shares his experiences building a secure developer training program, emphasizing the importance of gamification, tiered training, showmanship, and real-world examples to foster engagement and efficient learning. Note this episode will continue in with a part two in the next episode
ISACA Event (10 Jan 2024) With G Mark Hardy...
2023-12-1842 minCISO Tradecraft®#159 - Refreshing Your Cybersecurity StrategyIn this episode of CISO Tradecraft, host G. Mark Hardy guides listeners on how to refresh their cybersecurity strategy. Starting with the essential assessments on the current state of your security, through to the creation of a comprehensive, one-page cyber plan. The discussion covers different approaches to upskilling the workforce, tools utilization, vulnerability management, relevant regulations, and selecting the best solution for your specific needs. The show also includes tips on building a roadmap, creating effective key performance indicators, and validation exercises or trap analysis to ensure the likelihood of success. At the end of the discussion, G. Mark...
2023-12-1123 min
CISO Tradecraft®#159 - Refreshing Your Cybersecurity StrategyIn this episode of CISO Tradecraft, host G. Mark Hardy guides listeners on how to refresh their cybersecurity strategy. Starting with the essential assessments on the current state of your security, through to the creation of a comprehensive, one-page cyber plan. The discussion covers different approaches to upskilling the workforce, tools utilization, vulnerability management, relevant regulations, and selecting the best solution for your specific needs. The show also includes tips on building a roadmap, creating effective key performance indicators, and validation exercises or trap analysis to ensure the likelihood of success. At the end of the discussion, G. Mark...
2023-12-1123 min
Let's Talk to the LordSpiritual Warfare In Music with Christian Artist James Hardy S7E10Indie Christian Artist James Hardy Spiritual Warfare In Music with Apostle John E. Ross
2022-11-0335 minCISO Tradecraft®#93 - How to Become a Cyber Security ExpertHow do you become a Cyber Security Expert?
Hello and welcome to another episode of CISO Tradecraft, the podcast that provides you with the information, knowledge, and wisdom to be a more effective cybersecurity leader. My name is G. Mark Hardy, and today we're going to talk about how to provide advice and mentoring to help people understand how to become a cybersecurity expert. As always, please follow us on LinkedIn, and subscribe to our podcasts.
As a security leader, part of your role is to develop your people. That may not be written anywhere in...
2022-08-2929 minCISO Tradecraft®#92 - Updating the Executive Leadership Team on CyberShow Notes
Hello, and welcome to another episode of CISO Tradecraft -- the podcast that provides you with the information, knowledge, and wisdom to be a more effective cyber security leader. My name is G. Mark Hardy, and today we're going to offer tips and tools for briefing your executive leadership team, including the four major topics that you need to cover. As always, please follow us on LinkedIn, and make sure you subscribe so you can always get the latest updates.
Imagine you have been in your role as the Chief Information Security Officer fo...
2022-08-2226 minCISO Tradecraft®#90 - A CISO’s Guide to PentestingA CISO’s Guide to Pentesting
References
https://en.wikipedia.org/wiki/Penetration_test
https://partner-security.withgoogle.com/docs/pentest_guidelines#assessment-methodology
https://owasp.org/www-project-web-security-testing-guide/latest/3-The_OWASP_Testing_Framework/1-Penetration_Testing_Methodologies
https://www.pcisecuritystandards.org/documents/Penetration_Testing_Guidance_March_2015.pdf
https://pentest-standard.readthedocs.io/en/latest/
https://www.isecom.org/OSSTMM.3.pdf
https://s2.security/the-mage-platform/
https://bishopfox.com/platform
https://www.pentera.io/
https://www.youtube.com/watch?v=g3yROAs-oAc
****************************
Hello, and welcome to another episode of CISO Tradecraft -- the podcast that provides you with the infor...
2022-08-0816 min
DECODING AQ - Adaptability For The Future Of Work With Ross ThornleyDecoding AQ with Ross Thornley Feat. Whitney Johnson - The founder and CEO of Disruption AdvisorsOne of the ten leading business thinkers in the world as named by Thinkers50 – an expert at helping leaders grow their people to grow their organization. Whitney is an award-winning author, world-class keynote speaker, frequent lecturer for Harvard Business School's Corporate Learning, and an executive coach and advisors to CEOs. Host of "Disrupt Yourself" podcast at whitneyjohnson.comCo-founded the Disruptive Innovation Fund with Harvard Business School’s late Clayton Christensen and a LinkedIn Top Voice (2020) with 1.8 million followers.Author of 4 books:Smart GrowthHow to Grow Your People to Grow Your...
2022-07-1949 min
The Pagey Train PodcastPagey Train #109 Davo HardyAboard the Pagey Train this week Davo Hardy, a film director and writer from Sydney, Australia. Known for his coming-of-age dramas, such as his debut feature The Lives We Lead. Hop aboard as Roscoe and Davo unpack the journey of film making. Listen or watch new episodes every week and SUBSCRIBE
2022-06-282h 20
Tome RaidersThe Witches of DartmoorWe hope you're ready for some chaotic energy! Ross and Laura are back from their unscheduled sabbatical with an absolute corker of an episode. We've gone back to our roots in this return to William Crossing's Legends of Dartmoor, featuring all of our favourites - petty malevolent witches, disappearing bullocks, inexplicable tangents and, as always, plenty of cackling and swears.
2022-05-2858 min
General Witchfinders: The British Horror Podcast24 - The Wicker Man (1973)The Wicker Man is a 1973 British folk horror film directed by Robin Hardy and starring Edward Woodward, Britt Ekland, Diane Cilento, Ingrid Pitt, and Big Chris Lee. In his 7th appearance on The General Witchfinders. The screenplay by Anthony (frenzy) Shaffer, inspired by David Pinner's 1967 novel Ritual, centres on the visit of Police Sergeant Neil Howie to the isolated island of Summerisle in search of a missing girl. Howie, a devout Christian, is appalled to find that the inhabitants of the island have abandoned Christianity and now practice a form of Celtic paganism.The movie is...
2022-03-181h 43
Tome RaidersThe Forest Song by Lesya Ukrainka (1/2)We’re back! After a brief period of convalescence, Ross and Laura are back with their first two parter! Join us as we delve in to Act I of The Forest Song, a delightfully weird and atmospheric play by Ukrainian poet and playwright Lesya Ukrainka. Expect malevolent water goblins, horny forest nymphs, achingly beautiful landscapes and (as always) plenty of cackling and swears from your illustrious hosts.
2022-03-121h 11
Tome RaidersGhost Stories by M.R. JamesIt’s time to get sPoOoOky! Take a trip to Suffolk as Ross reads us "Rats", a delightfully creepy tale by M. R. James. Learn why you shouldn’t go creeping around deserted inns in the middle of nowhere, and definitely shouldn’t be breaking and entering into a locked room uninvited. Expect lots of swears and even more laughter. This is a slightly scary one, but Laura is a massive wimp and even she wasn’t too spooked.
2022-02-1941 min
Tome RaidersThe Enchanted Cave of Cesh CorranDon't mess with the Fae! In this episode, Laura and Ross are taking a trip to the Enchanted Caves of Kesh in County Sligo, Ireland for a visit to Fionn MacUail and friends in this classic Irish fairytale that takes a dark turn. Expect moustached witches, dogs with more sense than their humans, raucous laughter and lots of swears.
2022-02-0546 min
Tome RaidersDragons! In the Bible!You better believe it! There are dragons in the Bible, and Ross can prove it. This week we're looking at two texts: the description of the Leviathan from Job 41, and the deuterocanonical (i.e. didn’t quite make it in the canon) story of Bel & The Dragon from Daniel 14. There are a number of parentheticals we explore, including growing up in religious communities, Tiamat, and Jaws 4: The Revenge.
During this podcast we unpack a little religious trauma, so if that’s too close to the bone, we advise you skip this one. (Or you might find it cath...
2022-01-2253 min
Tome RaidersJapanese Ghost StoriesWe're leaving the British Isles to zoom around the globe and across time to Meiji-era Japan. Ever since studying the Kobayashi film Kwaidan at University, Ross has been slightly obsessed with its source material, Kwaidan: Stories and Studies of Strange Things by the Greek-Irish folklorist Lafcadio Hearn. He's picked three of his favourite tales to give Laura a good spook.
This week, you'll learn why you should never open the box your wife has explicitly told you not to open; why you should never trust a badger selling noodles; and why, if hiding from a samurai ghost...
2022-01-081h 01
Tome RaidersA Christmas Tale: Sir Gawain and the Green KnightIn this special Christmas episode (by which we mean, recorded on Christmas morning and about a story vaguely related to Christmas) Ross and Laura are going on a trip to Arthur's Court at Camelot, and heading out on a journey with one of his most famed knights of the Round Table. When a mysterious stranger crashes King Arthur's Christmas Party, Sir Gawain steps up to win his spurs and take the intruder down a peg. Unfortunately, in doing so he bound himself to a rematch one year hence. Expect laughter, folklore, dick jokes and a few swears.
2021-12-251h 22
Tome RaidersThe Earliest Tale of King ArthurToday Ross and Laura read a tale from The Mabinogion called Culhwch & Olwen (or, by Lady Charlotte Guest's less sexually progressive rendering, "How Kilhwch won Olwen"). This story is notable for being one of the oldest surviving tales of Arthur—though not as you've ever seen him before. There are no swords in stones or lakes and no holy grails. Instead, you'll find something completely bananas. Expect lots of butchered Welsh names, Sir Cai getting pissy over a poem, salmon with arms, and lots of Medieval sarcasm.
2021-12-1857 min
Tome RaidersThe Giants of DartmoorToday Ross reads Laura an excerpt from a compilation of folk stories by William Crossing called Folklore & Legends of Dartmoor, compiled by Brian Le Messurier. The chapter is titled Giants and Strong Men, and we really get down into it. Expect to hear about Geoffrey of Monmouth, "excrescence", the Slipper Stones, and other quirks and oddities related to giants in Dartmoor.
Corrections & Clarifications:
William Crossing was born in the 19th Century, however he wrote this chapter in the early 20th Century.
Branscombe is the name of a village on the South coast of Devon.
Excrescence means "...
2021-12-1135 min
CISO Tradecraft®#46 - Crisis Leadership with G Mark Hardy‘s 9/11 ExperienceHave you ever faced a crisis? How well did you do? You should always want to improve your skills in case another happens. On the 20th anniversary of 9/11, G. Mark Hardy shares some of his experiences as the on-scene commander for the military first responders at the World Trade Center, and expands that into a set of skills and attributes that you can cultivate to become a more effective crisis response leader in your role as a cybersecurity professional.
References:
5 Leadership Skills Link
How to Combat a Crisis Link
Manage a Crisis Link
Lessons in C...
2021-09-1045 minCISO Tradecraft®#46 - Crisis Leadership with G Mark Hardy‘s 9/11 ExperienceHave you ever faced a crisis? How well did you do? You should always want to improve your skills in case another happens. On the 20th anniversary of 9/11, G. Mark Hardy shares some of his experiences as the on-scene commander for the military first responders at the World Trade Center, and expands that into a set of skills and attributes that you can cultivate to become a more effective crisis response leader in your role as a cybersecurity professional.
References:
5 Leadership Skills Link
How to Combat a Crisis Link
Manage a Crisis Link
Lessons in C...
2021-09-1045 min
Y Advancing Equity PodcastUnity in the Community with Mayor Jim RossWe are honored and excited to feature Mayor Jim Ross for episode 2 of the Y Advancing Equity Podcast. We are committed to inviting our community leaders to talk about what unity in our community looks like to them. Don't miss this conversation with Mayor Ross as we talk about inclusion, the importance of diversity and unity.
2021-07-1443 minCISO Tradecraft®#30 - Cloud Drift (with Yoni Leitersdorf)This episode is sponsored by Indeni.
On this episode of CISO Tradecraft, G Mark Hardy discusses with Yoni Leitersdorf (CEO and CISO of Indeni) the risks which can occur in a cloud environment after it has been provisioned. Essentially it's quite common for organizations to change their cloud environment from what was declared in a Terraform or Cloud Formation Script. These unapproved cloud changes or Cloud Drift often create harmful misconfigurations and have the potential to create data loss events.
The podcast discusses the pros and cons of two key approaches to solve the Cloud Dri...
2021-05-2142 minCISO Tradecraft®#24 - Everything you wanted to know about RansomwareWould you like to know more about Ransomware? On this episode of CISO Tradecraft, G Mark Hardy and Ross Young provide an in-depth discussion on Ransomware. Key discussions include:
What is ransomware?
Why does it work?
Ransomware Types (Client-Side, Server-Side, & Hybrid)
How each of these enter a target environment
Ransomware Incidents
The Economics of Ransomware
How is Ransomware Evolving?
Why Ransomware continues to work :(
Ethical Issues to consider before paying
Ransomware Defenses
Please subscribe to the CISO Tradecraft LinkedIn Group to get even more great content
CISA Ransomware Guide Link
2021-04-0845 min
CISO Tradecraft®#24 - Everything you wanted to know about RansomwareWould you like to know more about Ransomware? On this episode of CISO Tradecraft, G Mark Hardy and Ross Young provide an in-depth discussion on Ransomware. Key discussions include:
What is ransomware?
Why does it work?
Ransomware Types (Client-Side, Server-Side, & Hybrid)
How each of these enter a target environment
Ransomware Incidents
The Economics of Ransomware
How is Ransomware Evolving?
Why Ransomware continues to work :(
Ethical Issues to consider before paying
Ransomware Defenses
Please subscribe to the CISO Tradecraft LinkedIn Group to get even more great content
CISA Ransomware Guide Link
2021-04-0845 min
CISO Tradecraft®#23 - NSA’s Top 10 Cybersecurity Mitigation StrategiesIf there's one place that knows how Advanced Persistent Threat (APT) actors work, it's the National Security Agency (NSA). On this episode of CISO Tradecraft G Mark Hardy and Ross Young discuss NSA's Top Ten Cybersecurity Mitigation Strategies and how to use them to secure your company.
Since the mitigation strategies are ranked by effectiveness against known APT tactics, they can be used to set the priorities for organizations to minimize mission impact from cyber attacks.
Update and Upgrade Software Immediately
Defend Privileges and Accounts
Enforce Signed Software Execution Policies
Exercise a System Recovery Plan
Actively M...
2021-04-0243 minCISO Tradecraft®#23 - NSA’s Top 10 Cybersecurity Mitigation StrategiesIf there's one place that knows how Advanced Persistent Threat (APT) actors work, it's the National Security Agency (NSA). On this episode of CISO Tradecraft G Mark Hardy and Ross Young discuss NSA's Top Ten Cybersecurity Mitigation Strategies and how to use them to secure your company.
Since the mitigation strategies are ranked by effectiveness against known APT tactics, they can be used to set the priorities for organizations to minimize mission impact from cyber attacks.
Update and Upgrade Software Immediately
Defend Privileges and Accounts
Enforce Signed Software Execution Policies
Exercise a System Recovery Plan
Actively M...
2021-04-0243 min
CISO Tradecraft®#22 - Modern Software Development PracticesWould you like to know the best practices in modern software development? On this episode G Mark Hardy and Ross Young overview the 12 Factor App and its best practices:
Codebase: One codebase tracked in revision control with many deploys.
Dependencies: Explicitly declare and isolate dependencies.
Config: Store configurations in the environment.
Backing Services: Treat backing services as attached resources
Build, Release, Run: Strictly separate build and run stages
Processes: Execute the app as one or more stateless processes.
Port Binding: Export services are via port binding.
Concurrency: Scale out via the process model.
Disposability: Maximize robustness with fast st...
2021-03-2645 minCISO Tradecraft®#22 - Modern Software Development PracticesWould you like to know the best practices in modern software development? On this episode G Mark Hardy and Ross Young overview the 12 Factor App and its best practices:
Codebase: One codebase tracked in revision control with many deploys.
Dependencies: Explicitly declare and isolate dependencies.
Config: Store configurations in the environment.
Backing Services: Treat backing services as attached resources
Build, Release, Run: Strictly separate build and run stages
Processes: Execute the app as one or more stateless processes.
Port Binding: Export services are via port binding.
Concurrency: Scale out via the process model.
Disposability: Maximize robustness with fast st...
2021-03-2645 min
CISO Tradecraft®#20 - Zero TrustWould you actually like to learn about what Zero Trust is without a bunch of marketing jargon? On this week's episode G Mark Hardy and Ross Young provide a thoughtful discussion on Zero Trust from NIST and Microsoft:
Microsoft's Zero Trust Principles
Verify Explicitly
Use Least Privileged Access
Assume Breach
NIST 800-207 Seven Tenets of Zero Trust
All data sources and computing services are considered resources
All communication is secured regardless of network location
Access to individual enterprise resources is granted on a per-session basis
Access to resources is determined by dynamic policy
The enterprise monitors and measures t...
2021-03-1245 minCISO Tradecraft®#20 - Zero TrustWould you actually like to learn about what Zero Trust is without a bunch of marketing jargon? On this week's episode G Mark Hardy and Ross Young provide a thoughtful discussion on Zero Trust from NIST and Microsoft:
Microsoft's Zero Trust Principles
Verify Explicitly
Use Least Privileged Access
Assume Breach
NIST 800-207 Seven Tenets of Zero Trust
All data sources and computing services are considered resources
All communication is secured regardless of network location
Access to individual enterprise resources is granted on a per-session basis
Access to resources is determined by dynamic policy
The enterprise monitors and measures t...
2021-03-1245 min
CISO Tradecraft®#19 - Team BuildingEvery leader needs to know how to lead and manage a team. On this episode G Mark Hardy and Ross Young share tradecraft on team building.
Pitfalls to team building with becoming a hero
Organizational Maturity Models (Levels 1-5)
Tuckman Teaming Model (Forming, Storming, Norming, and Performing)
Leadership Styles (Telling, Selling, Participating, & Delegating)
Aligning your Team and Regaining former employees
2021-03-0544 minCISO Tradecraft®#19 - Team BuildingEvery leader needs to know how to lead and manage a team. On this episode G Mark Hardy and Ross Young share tradecraft on team building.
Pitfalls to team building with becoming a hero
Organizational Maturity Models (Levels 1-5)
Tuckman Teaming Model (Forming, Storming, Norming, and Performing)
Leadership Styles (Telling, Selling, Participating, & Delegating)
Aligning your Team and Regaining former employees
2021-03-0544 minCISO Tradecraft®#18 - Executive PresenceHaving the ability to inspire confidence is crucial to lead others and allows you the opportunity to gain access to executive roles. On this episode G Mark Hardy and Ross Young discuss executive presence:
What is it
Why you need it
How to get it
We will discuss Gerry Valentine's 7 Key Steps to building Your executive presence:
Have a vision, and articulate it well
Understand how others experience you
Build your communication skills
Become an excellent listener
Cultivate your network and build political savvy
Learn to operate effectively under stress
Make sure your appearance isn't a d...
2021-02-2648 min
CISO Tradecraft®#18 - Executive PresenceHaving the ability to inspire confidence is crucial to lead others and allows you the opportunity to gain access to executive roles. On this episode G Mark Hardy and Ross Young discuss executive presence:
What is it
Why you need it
How to get it
We will discuss Gerry Valentine's 7 Key Steps to building Your executive presence:
Have a vision, and articulate it well
Understand how others experience you
Build your communication skills
Become an excellent listener
Cultivate your network and build political savvy
Learn to operate effectively under stress
Make sure your appearance isn't a d...
2021-02-2648 minDECODING AQ - Adaptability For The Future Of Work With Ross ThornleyDecoding AQ with Ross Thornley Feat. Julio Maria Muhorro - Sharing positivity for successJulio Maria Muhorro is an award-winning professional with a positive attitude, organization, and dependability. Julio uses his 7 years' experience within management, training and research environments to enable personal, professional and business growth. He is the founder of Sharing Knowledge International a company guided by the same mission and offers business advisory, career counselling, transformational coaching, training, speaking engagements, and knowledge consultancy.Ross and Julio discuss personal development in education, soft skills, self improvement and characteristics you want to embody. The pair also talk about mindfulness, mentors, mindset and finally adaptability.Timestamps:00:47 J...
2021-02-0941 min
CISO Tradecraft®#13 - Executive CompetenciesHave you ever wanted to become an executive, but didn’t know what skills to focus on? On this episode of CISO Tradecraft, G Mark Hardy and Ross Young provide guidance from the Office of Personnel Management (Chief Human Resources Agency and personnel policy manager for the US government). The podcast discusses the 6 Fundamental Competencies and the 5 Executive Core Qualifications required by all federal executives.
Fundamental Competencies:
Interpersonal Skills
Oral Communication
Integrity/Honesty
Written Communication
Continual Learning
Public Service Motivation
Executive Core Qualifications
Leading Change
Leading People
Results Driven
Business Acumen
Building Coali...
2021-01-2247 minCISO Tradecraft®#13 - Executive CompetenciesHave you ever wanted to become an executive, but didn’t know what skills to focus on? On this episode of CISO Tradecraft, G Mark Hardy and Ross Young provide guidance from the Office of Personnel Management (Chief Human Resources Agency and personnel policy manager for the US government). The podcast discusses the 6 Fundamental Competencies and the 5 Executive Core Qualifications required by all federal executives.
Fundamental Competencies:
Interpersonal Skills
Oral Communication
Integrity/Honesty
Written Communication
Continual Learning
Public Service Motivation
Executive Core Qualifications
Leading Change
Leading People
Results Driven
Business Acumen
Building Coali...
2021-01-2247 min
CISO Tradecraft®#12 - The Three Ways of DevOpsMaking things cheaper, faster, and better is the key to gaining competitive advantage. If you can gain a competitive advantage in cyber, then you will reduce risk to the business and protect key revenue streams. This episode discusses the three ways of DevOps and how you can use them to improve information security.
The three ways of DevOps consist of:
The First Way: Principles of Flow
The Second Way: Principles of Feedback
The Third Way: Principles of Continuous Learning
If you would like to learn more about the three ways of DevOps, G Mark Hardy and...
2021-01-1545 minCISO Tradecraft®#12 - The Three Ways of DevOpsMaking things cheaper, faster, and better is the key to gaining competitive advantage. If you can gain a competitive advantage in cyber, then you will reduce risk to the business and protect key revenue streams. This episode discusses the three ways of DevOps and how you can use them to improve information security.
The three ways of DevOps consist of:
The First Way: Principles of Flow
The Second Way: Principles of Feedback
The Third Way: Principles of Continuous Learning
If you would like to learn more about the three ways of DevOps, G Mark Hardy and...
2021-01-1545 min
CISO Tradecraft®#8 - Crucial ConversationsCISOs often encounter situations where everyone has a different opinion, it's a high stakes decision, and emotions are running high. These situations create crucial conversations opportunities where a CISO needs to be effective. This podcast discusses how to turn disagreement into dialogue, surface any subject, and make it safe to discuss. Please listen as G Mark Hardy and Ross Young discuss the 8 step process from the book, "Crucial Conversations."
Get Unstuck
Start With Heart
Master My Stories
State My Path
Learn To Look
Make IT Safe
Explore Others' Path
Move To Action
We recommend you visit the fol...
2020-12-1856 minCISO Tradecraft®#8 - Crucial ConversationsCISOs often encounter situations where everyone has a different opinion, it's a high stakes decision, and emotions are running high. These situations create crucial conversations opportunities where a CISO needs to be effective. This podcast discusses how to turn disagreement into dialogue, surface any subject, and make it safe to discuss. Please listen as G Mark Hardy and Ross Young discuss the 8 step process from the book, "Crucial Conversations."
Get Unstuck
Start With Heart
Master My Stories
State My Path
Learn To Look
Make IT Safe
Explore Others' Path
Move To Action
We recommend you visit the fol...
2020-12-1856 min
CISO Tradecraft®#1 - What is a CISO?On this pilot episode you will get to meet the hosts of the show (G Mark Hardy & Ross Young) and learn a little bit about their backgrounds.
Chapters
00:00 Introductions
04:47 What is a CISO?
07:24 Enable the Rock Climber to Take Risks
13:32 What do CISOs need to know?
18:07 Compliance is a C-
21:23 What functions and services do CISOs oversee?
25:48 The importance of a Purple Team
29:45 Is your Security Office a Red Team or a Blue Team?
34:50 Which organization in security is most likely to produce a CISO
39:11 The Hidden Key to Success is Communication Skills
41:17 CISO Key Capabilities...
2020-10-3050 minCISO Tradecraft®#1 - What is a CISO?On this pilot episode you will get to meet the hosts of the show (G Mark Hardy & Ross Young) and learn a little bit about their backgrounds.
Chapters
00:00 Introductions
04:47 What is a CISO?
07:24 Enable the Rock Climber to Take Risks
13:32 What do CISOs need to know?
18:07 Compliance is a C-
21:23 What functions and services do CISOs oversee?
25:48 The importance of a Purple Team
29:45 Is your Security Office a Red Team or a Blue Team?
34:50 Which organization in security is most likely to produce a CISO
39:11 The Hidden Key to Success is Communication Skills
41:17 CISO Key Capabilities...
2020-10-3050 min
Ross And Phil Talk MoviesRoss And Phil Talk... Bond, Holmes & Babysitters (The Babysitter: Killer Queen, Enola Homes and more!)On this episode of the podcast we talk about Bond, Holmes & Babysitters as we catch up on The Babysitter: Killer Queen, new Netflix original Enola Homes and the recent talk about Tom Hardy as Bond.
Hosted by Award winning filmmaker Ross Boyask and blogger/writer/failed former filmmaker Phil Hobden.
Discussed: The Babysitter: Killer Queen, Enola Homes, Moonraker, Justice League, Superman, Avatar, The Babysitter, The Out of Towers, Legacy Of Lies, James Bond
For more on Ross Boyask search @RossBoyask on Twitter, Instagram or Facebook. Also check out @EvoFilmsUK online.
For more...
2020-09-3049 min
MothernessHannah Hardy-Jones of The Kite Program / postpartum bipolar disorder, recovery, second child, healing birthThis episode of Motherness is proudly sponsored by Mildred&Co. Mildred&Co is a lovingly curated baby and wedding gift registry and everyday gift store.Trigger warning: this episode details bipolar disorder, mania, depression, anxiety, and other topics around mental illness. If any of these themes are triggering for you, please take care while you're listening. If you're worried about your own mental health or that of someone you love, call 0800 LIFELINE (0800 543 354).Today’s guest is Hannah Hardy-Jones, a beautiful māmā and founder of The Kite Program who was diagnosed with postpartum bipolar disorder afte...
2020-08-271h 01
Fruit Talk!15 Steps to Success: Fig Checklist | Fruit Talk! w/ Ross Raddi -- EP: 72A checklist for all fig growers to ensure a successful harvest and happy trees.
Make sure there is adequate light penetration into the canopy of your tree. Bend limbs and prune accordingly to open the canopy. Thin new shoots at bud break. Train figs as a tree form or as a cordon when possible. A bush should have no more than 3-6 trunks from the base. Trees with no more than 3-6 scaffolds.
Have a well draining & consistently moist soil. Not wet. Not dry. Consistently slightly drier than moist for optimum fruit quality.
Applications of 10...
2020-07-3028 min
DECODING AQ - Adaptability For The Future Of Work With Ross ThornleyDecoding AQ with Ross Thornley Feat. Dr. Benjamin Hardy - Personality isn't PermanentDr. Benjamin Hardy is an organizational psychologist, an esteemed author, and a renowned speaker. Host Ross Thornley talks with Dr. Hardy talks about his new book, "Personality Isn’t Permanent", why it’s important to spend time thinking about thinking, and some of the keys of adaptability. The pair also discuss psychological flexibility being essential in order to jump from environment to environment — and not being held to the ideas of the former context. Timestamps:2:09: What drove Dr. Hardy towards writing4:26: The various ways writers write7:28: The personality test that could have changed everything13:52: Poking...
2020-06-3040 min
DECODING AQ - Adaptability For The Future Of Work With Ross ThornleyDecoding AQ with Ross Thornley Feat. Heather McGowan - The Adaptation AdvantageHost Ross Thornley talks about adaptability requiring vulnerability — as does learning. Being deeply optimistic about humans, Heather McGowan reflects upon getting in touch with your identity — and leadership within this new normal. She also discusses how humans are transitioning away from universal income without any obligations and why learning is the new pension.Timestamps:1:12: Who is Heather McGowan — in her own words2:48: The transition from corporate work to writing and speaking5:55: Identity — and challenges of adapting that for the future11:00: Different aspects of leadership14:58: Exploration and exploitation in value creation21:08: Successf...
2020-06-1643 min
Making Business MatterE23 – What is a Crisis? with Ross Hardy – Expert InterviewE23 - Interview With Crisis Negotiator, Ross Hardy
Ross Hardy spent a decade as a cliff-edge crisis negotiator at one of the world’s most notorious suicide spots. The team he founded and led there became the busiest search and rescue team in the UK and has rescued 1000’s of people to date. The leadership lessons that he learned in those years, he now teaches through Discovery Hope, a UK based leadership consultancy. His latest online course Smart Thinking For Times of Crisis is available on Udemy and teaches tools for self, team, and organisational leadership for times of crisis and...
2020-05-1500 min
Making Business Matter (MBM)Ross Hardy – What is a Crisis? | Expert InterviewEpisode 23 - Interview With Crisis Negotiator, Ross Hardy
Ross Hardy spent a decade as a cliff-edge crisis negotiator at one of the world’s most notorious suicide spots. The team he founded and led there became the busiest search and rescue team in the UK and has rescued 1000’s of people to date. The leadership lessons that he learned in those years, he now teaches through Discovery Hope, a UK based leadership consultancy. His latest online course Smart Thinking For Times of Crisis is available on Udemy and teaches tools for self, team, and organisational leadership for times of crisis and...
2020-05-151h 10Making Business Matter (MBM)Ross Hardy – What is a Crisis? | Expert InterviewEpisode 23 - Interview With Crisis Negotiator, Ross Hardy
Ross Hardy spent a decade as a cliff-edge crisis negotiator at one of the world’s most notorious suicide spots. The team he founded and led there became the busiest search and rescue team in the UK and has rescued 1000’s of people to date. The leadership lessons that he learned in those years, he now teaches through Discovery Hope, a UK based leadership consultancy. His latest online course Smart Thinking For Times of Crisis is available on Udemy and teaches tools for self, team, and organisational leadership for times of crisis and...
2020-05-151h 10Making Business Matter (MBM)Ross Hardy – What is a Crisis? | Expert InterviewEpisode 23 - Interview With Crisis Negotiator, Ross Hardy
Ross Hardy spent a decade as a cliff-edge crisis negotiator at one of the world’s most notorious suicide spots. The team he founded and led there became the busiest search and rescue team in the UK and has rescued 1000’s of people to date. The leadership lessons that he learned in those years, he now teaches through Discovery Hope, a UK based leadership consultancy. His latest online course Smart Thinking For Times of Crisis is available on Udemy and teaches tools for self, team, and organisational leadership for times of crisis and...
2020-05-151h 10
5 Deep with Jay Ross - Deep | Tech | Vocal | House | Techno5 Deep with Jay Ross Ep.1035 Deep with Jay Ross, brings you 5 of the best new and incisive tracks in electronic music today, selected and mixed by Jay Ross. Traversing the genres of Chill, Indie, Deep, Tech, and Vocal House Music you can enjoy on your schedule, without having to devote an entire life to the club scene! This podcast is more about showcasing individual tracks and their artists than the mixing, and strives to incorporate the multiple genres that break the mold of today’s Electronic Dance Music, minus the mainstream and commercial noise that eats at our soul. Follow @DJay_Ross on twitter fo...
2017-02-2128 min
Futility ClosetRamanujan In 1913, English mathematician G.H. Hardy received a package from an unknown accounting clerk in India, with nine pages of mathematical results that he found "scarcely possible to believe." In this week's episode of the Futility Closet podcast, we'll follow the unlikely friendship that sprang up between Hardy and Srinivasa Ramanujan, whom Hardy called "the most romantic figure in the recent history of mathematics." We'll also probe Carson McCullers' heart and puzzle over a well-proportioned amputee. Intro: W.H. Hill's signature was unchanged when inverted. Room 308 of West Java's S...
2017-02-0630 min
Medium Mashup PodcastsJay And Ross Talk Shit Episode 29Welcome to another episode of Jay and Ross Talk Shit! This week, what begins as a conversation about Mad Max: Fury Road evolves into a much broader discussion of our favorite action movies and the way that we view and evaluate movies. It runs a bit long, but it's a really fun piece that we hope you'll enjoy!
Or, if you're pressed for time and only want to listen to the things you care about the most, feel free to jump around below!
0:00 - Mad Max: Fury Road
---27:46-29:38 - Rambo/Rocky Tangent
---29:38-30:30 - Transporter 2 Tangent
---30:52...
2015-09-2200 min
the AP CollectionRoss Hardy // Fine ArtistRoss Hardy walked into my house with a portfolio and a HUGE roll of paper. He had carried everything down from his place up in Bloomfield in the middle of a hot July afternoon so the first thing I did was grab us some ice water. The dedication to sharing and displaying one's work is always a sign of a true artist. You can't live your life just waiting around hoping for someone to look over their shoulder and say, "Oh that's good!".
When I got to unfurl the three feet wide and eight feet tall piece...
2014-07-3058 min
Herstmonceux Free Church14/04/2013 - Ross Hardy Beachy Head Chaplaincy14/04/2013 - Ross Hardy Beachy Head Chaplaincy
2013-04-1400 min