Hacks and Hobbies with Junaid Ahmed
Sep 22, 2026 · 36 min · 11 segments
### **5 Key Takeaways** - **Cybersecurity is human first, tech second** Most failures start with people, not machines. Training, culture, and clear stories matter more than shiny tools…
Renee WynnGuestJunaid AhmedHostNow, let's bring this down to earth because most organizations aren't NASA, but they still have mission critical systems, right? If you had to boil down cyber resilience into a few principles, what are the ones that you teach every CEO and board member?

So I would start with, can you still operate? right look we'll put aside electricity

um but you could have generators on your systems that are actually absolutely key to your working conditions your mission you know however you want to to call that to the business of let's look at the stock exchange right if when that goes down and it's unexplained and not a planned outage or something and that would be more on a weekend it creates this ripple through financial markets so having built-in resiliency to your critical systems now it is hard to have conversations with people about what's a critical system

because if they're the system owner it is of course the most critical system that's around.

So this is where board and executive level conversations are is if I'm going to take you out at the knees,

um because operational technology and they had to shut it down um to keep it from potentially to stop getting into other critical systems so what do you need to operate minimally how is that all connected and what's your plan Is it a generator? Is it we go to paper? Is it what do we do? And this sort of says to the resiliences, I always love to push having scenarios and practice days.

And I know at NASA, when we practiced, we had a first of a practice day of the Washington, D.C., getting an attack.

What would we do and how would we communicate? And one of the scenarios included communication systems were compromised.

So it really forces you to think about how are we going to make this happen and what is critical to happen.

um is it getting people safely out of a building yes so what's going on with that so resilience aligned with having scenarios and practice sessions tabletops as they like to call them with your business so you understand the impacts and the impacts downstream

you could say i want this but if you take it out all of a sudden you'll see these tentacles of other operations that get impacted, and you've got to ask yourself and prepare for that.

For electricity going out, again, that could be another thing, is electricity is critical to operations.
Now, let's bring this down to earth because most organizations aren't NASA, but they still have mission critical systems, right? If you had to boil down cyber resilience into a few principles, what are the ones that you teach every CEO and board member?

So I would start with, can you still operate? right look we'll put aside electricity

um but you could have generators on your systems that are actually absolutely key to your working conditions your mission you know however you want to to call that to the business of let's look at the stock exchange right if when that goes down and it's unexplained and not a planned outage or something and that would be more on a weekend it creates this ripple through financial markets so having built-in resiliency to your critical systems now it is hard to have conversations with people about what's a critical system

because if they're the system owner it is of course the most critical system that's around.

So this is where board and executive level conversations are is if I'm going to take you out at the knees,

um because operational technology and they had to shut it down um to keep it from potentially to stop getting into other critical systems so what do you need to operate minimally how is that all connected and what's your plan Is it a generator? Is it we go to paper? Is it what do we do? And this sort of says to the resiliences, I always love to push having scenarios and practice days.

And I know at NASA, when we practiced, we had a first of a practice day of the Washington, D.C., getting an attack.

What would we do and how would we communicate? And one of the scenarios included communication systems were compromised.

So it really forces you to think about how are we going to make this happen and what is critical to happen.

um is it getting people safely out of a building yes so what's going on with that so resilience aligned with having scenarios and practice sessions tabletops as they like to call them with your business so you understand the impacts and the impacts downstream

you could say i want this but if you take it out all of a sudden you'll see these tentacles of other operations that get impacted, and you've got to ask yourself and prepare for that.

For electricity going out, again, that could be another thing, is electricity is critical to operations.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.