Oct 1, 2026 · 34 min · 17 segments
All links and images can be found on CISO Series LinkedIn used to have a decent reputation among cybersecurity…
Geoff BelknapHostHoward HoltonGuestNancy Free of Armored Defense said, "I saw the ten millionth post on how compliance isn't security the other day and practically came out of my skin.
Why does our industry keep saying things we know mean nothing? 'We take your security seriously.'" Oh, that's a classic right there.
The security equivalent of 'we all die eventually.' Technically true, operationally useless." By the way, these are three great examples [laughs] right here.
"So I don't know that LinkedIn is the problem, but I'm hoping it can be the solution.
There's enough of us gathered here that calling this endless noise what it is and demanding real perspective and dialogue may be just what is needed." And John Theobald, uh, global CISO over at the BMS Group said, quote, "I put a lot of it down to the immaturity of some commentators and the market as a whole.
If I read one more time, 'Cyber is no longer just an IT issue,' like it wasn't before? Or, 'GRC is not just about policies,' really? The clue is in the title.
There are many examples in the past that demonstrate this is not new." All right, Jeff, you've heard a few of these before.
I think it's also true that if I go through my LinkedIn posts, I've probably posted more than one of these tropes myself.
But I think what also is, is when these get repeated so much, and, and I also some...
Dig a level deeper." That's often a line you will hear me saying when one of these tropes are pulled out.
I know compliance doesn't equal security"? You know, Jeff, you with me on this one?
I- look, my gut reaction is, yeah, like, these tropes are easy, and they come out fast because they're at the tip of your tongue.
Nancy Free of Armored Defense said, "I saw the ten millionth post on how compliance isn't security the other day and practically came out of my skin.
Why does our industry keep saying things we know mean nothing? 'We take your security seriously.'" Oh, that's a classic right there.
The security equivalent of 'we all die eventually.' Technically true, operationally useless." By the way, these are three great examples [laughs] right here.
"So I don't know that LinkedIn is the problem, but I'm hoping it can be the solution.
There's enough of us gathered here that calling this endless noise what it is and demanding real perspective and dialogue may be just what is needed." And John Theobald, uh, global CISO over at the BMS Group said, quote, "I put a lot of it down to the immaturity of some commentators and the market as a whole.
If I read one more time, 'Cyber is no longer just an IT issue,' like it wasn't before? Or, 'GRC is not just about policies,' really? The clue is in the title.
There are many examples in the past that demonstrate this is not new." All right, Jeff, you've heard a few of these before.
I think it's also true that if I go through my LinkedIn posts, I've probably posted more than one of these tropes myself.
But I think what also is, is when these get repeated so much, and, and I also some...
Dig a level deeper." That's often a line you will hear me saying when one of these tropes are pulled out.
I know compliance doesn't equal security"? You know, Jeff, you with me on this one?
I- look, my gut reaction is, yeah, like, these tropes are easy, and they come out fast because they're at the tip of your tongue.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.