With the average CISO tenure hovering barely around two years, 70% of security executives reporting severe burnout, and personal legal liability on the rise, the modern CISO seat has become the hottest ticket in corporate tech.

In this episode of Cybersecurity Refined and Feral, Candy and Cailin are joined by veteran security executive Larry Whiteside Jr. to pull back the curtain on the CISO career path:

- The Evolution of the Seat: How the role shifted from the 1995 Citicorp breach into boardrooms, cyber insurance policies, and SEC disclosure deadlines.

- The "Blamed for the Cut Finger" Dilemma: Larry’s defining analogy for why CISOs take breaches personally and how to transition from operational fall guy to consultative risk advisor.

- Decoding Executive Presence: Why technical acumen in board meetings alienates leadership, and how to communicate cyber risk in plain business language.

- Life After the CISO Seat: The real playbook on transitioning into fractional CISO work, board directorships, consultancies, and the reality behind VC/Field CISO roles.

- Day 30 Playbook: How to build executive alliances by understanding how your C-suite peers are incentivized—and why finding a peer community like the CISO Society is your best defense against burnout.

⏱️ Timestamps

00:00 – Welcome back to Refined and Feral: The C-Suite’s Hottest Seat

00:28 – The Evolution: From Citicorp 1995 to SEC Deadlines & D&O Insurance

01:36 – Introducing Larry Whiteside Jr. (8-Time CISO & Cyversity Co-Founder)

03:08 – Origin Story: When Did the Job Stop Being an IT Gatekeeper?

06:16 – Cyber Liability Insurance & Learning to Walk IT Roadmaps Backwards

11:02 – The Knife-Fight Analogy: How CISOs Get Blamed for the Cut Finger

13:24 – Getting a Seat at Ideation: Overcoming "It's Too Early for Security"

17:31 – Decoding Executive Presence: Speaking Business vs. Tech Speak

24:40 – The 24-Month Turnover Trap: Are CISOs Fired or Burning Out?

27:47 – Disconnecting: Why It Took Larry 30 Years to Put the Phone Down

33:16 – Cailin’s Perspective: The Consultative CISO vs. Taking Incidents Personally

38:45 – Life After the Seat: Fractional Roles, Board Directorships & Consultancies

42:01 – The Truth About VC, Advisory, and "Field CISO" Marketing Roles

44:39 – Day 30 Advice: Social Engineering Your Peers & Building Trust Networks

51:34 – Finding Your Tribe: The CISO Society & Peer Communities

53:43 – Wrap-Up & Sign-Off: Stop Carrying the Pager for a House You Can’t Fix

***Work with Refined and Feral:Interested in sponsoring the podcast or appearing as a thought leadership guest? Contact Candy and Cailin directly at cybersecurity.refined@gmail.com.

If you work anywhere near tech, you’re hearing two topics on repeat: data privacy compliance and the frantic race to throw AI at literally everything. But most organizations get it backwards—treating data governance as a slow, painful regulatory tax or a security buzzkill.

In this episode of Cybersecurity Refined and Feral, hosts Candy and Cailin sit down with veteran data leader and technologist Ted Bardasz (EMC, Aetna) to cut through the vendor hype and unpack the operational truth: If your data foundation is messy, your AI will just hallucinate faster, your security team will play endless defense, and your teams will drown in information chaos.

Ted breaks down why clean data hygiene and disciplined data lineage are your real operational engine, how to implement a practical "data fabric" without turning your architecture into an untraceable bowl of spaghetti, and why managing data doesn't stop at the walls of your building.

⏱️ Timestamps
00:00 – The Hype vs. Reality: Compliance Tax or Operational Engine?
02:17 – The Real Operational Tax of Treating Governance as Friction
05:10 – The Myth of "Storage is Cheap": Why Data Hygiene Actually Matters
09:01 – Moving the Middle: Culture, Behavior, and the 5 S’s (Safety, Salary, Security, Stability, Structure)
16:13 – Stripping Away the Buzzwords: What is a Data Fabric, Really?
22:09 – Ditching the "Spaghetti Chart": Tracing the Life Cycle and Provenance of Data
25:40 – Black-Box Algorithms: Why Data Lineage is Your Only Defense for Explainable AI
29:48 – Autonomous Agents, Erased Logs, and the Death of Trust
33:59 – The Need for a Moral Fabric and Guardrails in Autonomous Systems
40:36 – The Hidden Dangers: Inherited Risk, Third-Party Data, and HIPAA Realities
45:36 – Practical Advice for Practitioners: Stepping Up Beyond the 9-to-5
48:46 – Final Takeaways: Before You Buy More Compute, Fix Your Data Plumbing

🔑 Key Takeaways
1. Garbage In, Amplified Chaos Out: You cannot build dependable, high-assurance AI on top of uncurated data dumps. Messy inputs yield fast, confident hallucinations.

2. From Spaghetti to Tablecloth: Traditional data lifecycle diagrams look like bowls of spaghetti. A true data fabric allows you to pull a single thread and trace provenance, metadata, and quality checks at every intersection.

3. Lineage is Your Explainability Recourse: When deep learning and agentic systems make aberrant decisions behind a black box, your primary audit trail is knowing exactly what data fed the outcome.
4. Governance Extends Past Your Perimeter: Your stewardship obligation doesn't stop inside your four walls—it follows the data when shared with third-party partners and downstream platforms.


🔔 Subscribe for weekly episodes on AI security, zero trust, governance frameworks, and data hygiene.

Are we racing toward an AI apocalypse, or are we just sprinting blindly into unforced technical disasters?

While headlines scream about superintelligence going rogue and senior safety researchers walk away from frontier labs, Washington and tech CEOs are repeating the same urgent message: We can’t slow down because we have to beat China. But when models start breaking out of evaluation sandboxes and hitting external servers, it raises the ultimate question: Do we slow down to ensure safety, or speed up to ensure victory—and at what cost?

In this episode of Cybersecurity Refined and Feral, hosts Candy and Cailin sit down with Rock Lambros, CEO of RockCyber, to cut through the sci-fi doomsday noise and look at what is actually breaking in production. Rock breaks down why the real danger isn't sentient killer robots—it’s autonomous agents doing exactly what they were programmed to do inside networks with zero guardrails. From the OpenAI–Hugging Face sandbox breakout to the reality of White House voluntary accords, check-box compliance, and tested kill switches, this is an unvarnished masterclass in navigating agentic AI risk.

⏱️ Timestamps
00:00 – Intro: AI Safety vs. AI Security 10 Months Later

01:16 – Fact or Fiction: Researchers Quitting & The Sprint Against China

02:44 – Welcome Rock Lambros, CEO of RockCyber

04:08 – The 1950s Grand Canyon Moment for AI: Learning from Crashes
06:08 – Why Boards Rush to Deploy: The Two Immutable Laws of Business

08:44 – Washington's Regulatory Hodgepodge & Model Safety Drama

10:15 – Will It Take a Kinetic Disaster to Force Safety Guidelines?

11:54 – National Defense Realities: Why China Isn't Pumping the Brakes

13:28 – Historical Parallels: From PII and GDPR to Executive Orders

17:10 – The White House AI Accords: Genuine Guardrails or Morally Binding PR?

19:23 – The Missing Pieces: Compliance Checkboxes, Ethics, and PCI Lessons

23:22 – Could an "AMA" or "PCI DSS for AI" Ever Work?

28:45 – The Danger of False Balance: Moving Fast vs. Doing It Safely

30:30 – Unknown Blast Radiuses: Australian Medicare & Autonomous Cheat Codes

32:04 – How Transformers Work: Completing the Task by Any Means Necessary

35:27 – The Star Trek Lesson: Dr. Soong, Lore, Data, and Innovation Risk

37:55 – Unintended Consequences: Why Comparing AI to Nuclear Risk Fails

38:57 – Practical Engineering Baselines: OWASP Top 10 for AI & NIST Overlays

40:53 – ITSM Fundamentals: Visibility, Runtime Actions, and Broken Kill Switches

42:31 – The Agentic Tooling Landscape & The OWASP Agent Control Standard

45:16 – Where to Get Involved: GenAI Project, AI Exchange, and CSA

46:39 – The Final Verdict: Is AI Armageddon Fact or Fiction?

47:49 – Wrap-up: Kill Sockets, Check Permissions, and Stop Feeding Models Junk Data


🔗 Resources Mentioned in This Episode
- OWASP GenAI Security Project: https://genai.owasp.org
- OWASP AI Exchange (EU AI Act & Multimodal): https://owaspai.org
- Cloud Security Alliance (CSA AI Initiatives) :https://cloudsecurityalliance.org
- US Executive Order inaugurating the era of Super Intelligence: https://www.whitehouse.gov/presidential-actions/2026/09/inaugurating-the-era-of-super-intelligence/?utm_source=substack&utm_medium=email
- AI 2027 (ai2027.com)

#cybersecurity #AI #AgenticAI #AISafety #InfoSec #CybersecurityRefinedAndFeral #OWASP #DataHygiene #AIRegulation #RockCyber

Is your organization actually practicing AI Governance, or are you just running a fancy AIOps pipeline and calling it a day?

In this episode of Cybersecurity Refined and Feral, Candy Alexander and Cailin Sullivan sit down with the ultimate "in-the-trenches" practitioner: James Kavanagh. As a former engineering leader at AWS and Microsoft, James delivered the world’s very first accredited ISO 42001 certification for a global technology platform. He’s here to expose the fluff, the buzzwords, and the massive disconnect between the people talking about AI governance and the few who are actually doing the work.

If you think a list of "vanilla ethical principles" or an MLOps dashboard means your enterprise is safe, secure, and lawful—think again.

🎯 What We Dive Into:

• The Nomenclature Trap: Why the industry is desperately confusing day-to-day operational tools (AIOps, data cleaning, patching) with systemic risk governance.
• Talkers vs. Doers: James breaks down why the actual builders are less confused than the consultants, and why we are repeating the exact same "compliance vs. security" mistakes we made in cyber 15 years ago.
• The 8 Disciplines of True Oversight: Why you can't just condense AI oversight into a single role or siloed department, and how to embed it where the work actually happens.
• The 3 Leaps of an AI Career: James maps out the fascinating trajectory of the modern AI practitioner—from getting "book smart" to mastering the human dimension of influence and leadership.
• The Five Eyes Warning: Why the latest intelligence advisories aren't just about securing your AI, but defending your entire infrastructure against AI threats.

The Bottom Line: Don't let the talkers confuse you. Tune in to learn how to step away from the corporate "AI Constitution" binder and start building practical, street-level adaptive mechanisms that actually hold under pressure.

🔗 Connect with James Kavanagh:

• Website & Practitioner Assessment: Head over to AICareer.pro to take the organizational or practitioner assessment and see where you stand on the path to mastery!
• Read His Insights: Check out the master practitioner deep-dives on the AI Career Pro blog.

💥 Join the Refined & Feral Community:If this conversation helped you cut through the industry noise, make sure to Like, Comment, and Share this episode with your network!

Subscribe for more open, gritty, and executive-level conversations where refinement meets chaos in the digital world. Stay safe, stay secure, stay refined... ...and don't be afraid to get a little bit feral!

#AIGovernance #Cybersecurity #AIOps #ArtificialIntelligence #RiskManagement #ISO42001 #WomenInCyber #Podcast