Dawn talks with Roddy Bergeron, Cybersecurity Technical Fellow at Sherweb, about why businesses keep buying cybersecurity and still struggle with it. Roddy lays out his "four P's" of a security program (people, policy, process, and technology, in that order) and explains why a tool-first approach leads to misconfigured, underused security.
They dig into how MSPs talk to clients in "nerd" instead of business outcomes, why clients rarely take risk seriously until something happens, and why security is an ongoing conversation instead of a one-time project.
The second half tackles AI: why every organization is already using it whether they admit it or not, how to start with policy and guardrails, and why most "AI projects" are really just automations.
If your team hasn't started that conversation yet, 3EC's free Executive AI Briefing Series walks you through it in 15 minutes a week: 3EC Executive AI Briefing Series.
Roddy closes with a reminder to stay curious, inspired by Cliff Stoll's DEF CON talk: DEF CON 34: Stalking the Wily Hacker, 40 Years Later.