Beyond Product Management

Heather Miller (PDRM Consulting)
  • 0.0 (0)
  • Technology
  • Weekly

Beyond Product Management is a podcast that explores the unexpected intersections of product management with other disciplines, industries, and ideas. We go beyond the usual frameworks to uncover fresh perspectives, unconventional insights, and the skills that truly set great PMs apart.

  1. 3d ago

    Why Now? The Case for Protecting Your Business Before It’s Too Late

    To wrap up Cybersecurity Awareness Month, Heather and John answer the question every small business owner is asking: Why should I invest in cybersecurity now? Reported cybercrime losses hit $20.9 billion in 2025, up 26%. Agentic AI and vibe coding are reshaping the landscape fast. Small businesses don’t have the luxury of waiting. And protecting your business doesn’t have to cost an arm and a leg. Heather also shares a story about vibe coding PDRM’s own Are You Hackable? quiz. The front end looked great, and the quiz worked. Then she and John reviewed the code from a security perspective, and they were horrified. Here’s what they found, how they fixed it, and why it matters for anyone with a quiz or lead magnet on their site. In this episode: Why the cyber landscape looks completely different than it did even a year agoHow agentic AI makes sophisticated attacks easier, and vibe coding makes vulnerable apps easier to shipThe behind-the-scenes story of vibe coding the Are You Hackable? quiz, and the security prompts that fixed itWhy a vulnerable quiz puts more than your website at risk: it can expose connected tools like your email platform through API keysJohn’s non-negotiables: keep API keys and secrets on the server, validate input on the server, and never trust client-side codeWhat a pen test is, and why even senior developers using security tools still get one before going liveWhy 81% of small businesses reported a security or data breach last year, and how that harm compoundsThe upside: how strong security helps you win contracts and sleep better at nightWhy every business needs an incident response plan. Think fire drills and safe words for your business.Key takeaway: You’re building something meant to last. If you don’t protect it, it won’t. Start small with low-cost steps and better habits, and right-size your security to your business. Resources & Links: Take the Are You Hackable? quizBlog post on securing vibe-coded quizzes, including the prompts to useJoin the Security Besties CommunityPDRM Consulting: pdrmconsulting.com PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

  2. 5d ago

    Well, Actually: Security Without the Mansplaining

    This was supposed to be an episode about why PDRM focuses on female founders and small businesses instead of chasing big-ticket enterprise contracts. Halfway through outlining it, Heather caught herself over-explaining, and she realized why: this month she spent a lot of time on the receiving end of people explaining her own field to her. In the final week of our Cybersecurity Awareness Month series, Heather shares what’s been happening in her comments and DMs, including men pitching their own services under her offer and giving her crypto advice when she’s never posted about crypto. She explains why it matters for every woman running a business, even if you never post about security. This isn’t a “men are the problem” episode. It’s about a pattern, and how to protect your business and your decisions from it. In this episode, we cover: A critical PHP vulnerability that could affect your website, and the one message to send your web host todayWhat happened when Heather offered to help founders build a security plan, and men showed up to pitch themselves insteadWhy confidence isn’t the same thing as expertiseThree questions to ask before taking anyone’s security adviceWhy “just hire an expert” is only half the answer, and why you need to understand the ROI before signing a five-figure contractWhy risk is personal, and why only the founder can decide how much risk the business takes on (including tradeoffs like whether contractors get a company email address)Why PDRM serves female founders and small businesses, and why security and business strategy belong togetherA rapid-fire recap of the whole October seriesThis week’s challenge: Check your website and server for the PHP update. If someone else hosts or manages your site, send them one message today: “Have we patched the PHP vulnerability?” Resources & Links: Free Cybersecurity Awareness Month Training, October 28. Phishing and online safety, open to everyone.Security Besties. Our hands-on cybersecurity community for female entrepreneurs. Plain English, real support, no mansplaining.“Are You Hackable?” Self-Assessment. A free, no-pressure first step to see where you stand.Cybersecurity spending blog series (Parts 1 and 2). How to think about security ROI for a small business.Part 1Part 2Something to sit with this week: Who are you letting explain your business to you? Are they helping you understand it, or just talking over you? PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

  3. Oct 22

    Anatomy of a Phishing Attack, Part 2: How AI Changed the Game

    If your idea of a phishing email is a long-lost prince promising you a fortune, it’s time for an update. In Part 2 of our Cybersecurity Awareness Month series, Heather and her husband and PDRM co-founder, John Miller, explore how AI has made phishing more realistic, more automated, and easier than ever for non-technical attackers to pull off. They also cover how AI is helping on the defense side. In this episode: Why the obvious typos and awkward grammar are gone, and what AI-written phishing looks like nowDeepfake voice and video, including the case where a finance employee joined a video call in which every other participant was a deepfake of company executivesAgentic AI: tools that handle the research, write the lure, send it, and can even place AI-voiced phone calls automaticallyPhishing-as-a-service and MFA bypass for rent, and how they’ve lowered the bar for attackersWhy small businesses and whole industries get targeted as the “weakest link,” plus what whaling isA lost-phone scam where an AI voice pretends to be an Apple Store to get your unlock code or account detailsThe defense side: using Copilot or Gemini in your inbox to get a second opinion, and how AI is improving spam filters and security toolsKey takeaway: The technology has changed, but the defense hasn’t. If something feels off, it probably is. Pause, and verify through a different channel than the one that contacted you. An attacker knowing details about you doesn’t make the message legitimate. Missed Part 1? Start with the basics of how phishing works and why you are the real target: [Part 1 link] Resources & next steps: Protect the Business You’ve Built: Join our free Cybersecurity Awareness Month training on October 28. We’ll go deeper on current tools and statistics, what to look for in emails, and how to set your business up for success. Register hereSecurity Besties Community: Ongoing cybersecurity support for female entrepreneurs, with standard ($100/month or yearly) and VIP ($3,000/quarter) options. Learn more PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

  4. Oct 20

    Anatomy of a Phishing Attack, Part 1: You Are the Target

    Phishing is still one of the easiest ways into a business, because the attacker isn’t really after your systems. They’re after you. In the first episode of this two-part Cybersecurity Awareness Month series, Heather is joined by her husband and PDRM co-founder, John Miller. They break down what a phishing attack actually is, why every founder, entrepreneur, and team member needs to recognize one, and the simple habits that keep your business safe. In this episode: Why the real goal of phishing is to steal your identity and operate inside your systems as youThe urgency trap: how attackers count on the “hurry up and respond” mindset most of us live inRed flags to check: hovering over links, spoofed sender addresses, and lookalike domains (a zero swapped in for an O)How attackers use your LinkedIn, Facebook, and other public info to write convincing, name-dropping emailsCommon impersonation tactics: the help desk, finance, executives, vendors, and banksIt’s not just email anymore: texts, phone calls, Slack, Teams, and multi-channel attacks designed to build false confidenceThe infamous unpaid toll text, and why the IRS and the government won’t text you demandsMalicious QR codes, both on physical signs and inside emails that slip past filtersThe single best habit: pause, step away from your phone, and verify through a different channelKey takeaway: Almost nothing in your inbox needs an immediate response. If a message feels urgent, that’s your cue to slow down, verify, and confirm with the sender another way before you click. Coming up next: In Part 2, we look at how AI has changed phishing, and why today’s phishing emails look nothing like the ones you remember. Resources & next steps: Protect the Business You’ve Built: Our free Cybersecurity Awareness Month training goes deeper on phishing and online safety. Register here:Security Besties Community: Ongoing cybersecurity support for female entrepreneurs.Standard membership: $100/month, with a yearly option availableNew VIP option: $3,000/quarter. It includes a one-on-one call, five hours a month of hands-on work from our team, and remediation help or additional support if something happens in your business.Learn more PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

  5. Oct 15

    What Is the Dark Web? A Plain-English Guide for Business Owners

    You’ve heard about the dark web a hundred times, but has anyone ever actually explained it to you? For Cybersecurity Awareness Month, Heather breaks it down in plain English, with no jargon and no scare tactics, so you know what it is, why it matters to your business, and what to do about it. In this episode: What the dark web is, and why it isn’t only for criminalsThe iceberg: the difference between the surface web, the deep web, and the dark webHow the 2023 23andMe breach exposed information on 6.9 million people because some customers reused passwordsTwo myths entrepreneurs believe: “I don’t make enough money to worry about it” and “I would know if I got hacked”Three simple steps you can take this week to protect yourselfResources mentioned: Check whether your email has been in a breach: haveibeenpwned.comTake the free Are You Hackable? quizBook a Single Security AssessmentRegister for our free October 28 training, “Protect the Business You’ve Built,” on phishing and staying safe online PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

  6. Oct 13

    Protect the Family You’ve Built: Keeping Your Kids Safe Online

    Some of the most important things we’ve built aren’t businesses. They’re our kids. Heather shares 15 years of lessons on keeping kids safe online, from Club Penguin in the living room to teens on Discord. You’ll hear about: Why we block strangers when kids are young, then shift to educating them as they grow, with oversight the whole wayLayers of protection: filters, device controls, and in-game settingsWhy your kids shouldn’t game on your work computerFour rules every kid should knowWhy open communication is the real safety netThis week’s challenge: Ask your kid to show you one app or game they love, and just listen. PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

  7. Oct 8

    Privacy vs. Security: Why Your Business Needs Both

    Privacy and security get used like they mean the same thing. They don’t. Treating them as one can leave a gap in your business you don’t even know is there. In this Cybersecurity Awareness Month episode, Heather introduces Sarah. Sarah is a coaching founder who has done a lot right: a password manager, a reputable CRM, a properly set-up Google account. Her tools are secure. But her intake form collects information she never uses, her session notes live in her phone’s notes app, and sensitive client texts stay on her phone forever. Sarah never asked the privacy questions. Heather explains the difference simply. Privacy is about what data you collect and who gets to see it. Security is about how you protect it. You need both to protect the business you’ve built. In this episode: Clear definitions of privacy and security, and why they get mixed upWhy you can have security without privacy, but you can’t really have privacy without securityWhy losing client data hurts more than losing your own, and what it costs in trust, renewals, and referralsThe overlooked places client data lives: notes apps, old intake forms, texts, DMs, and voice messagesWhy “I’m too small to be a target” is a myth, and why being small can make you more of a targetA brief look at privacy laws (GDPR and US state laws), including why your prospects’ locations matter too (not legal advice)Your two moves this week: Privacy move: List every place client information shows up in your business. Then simplify. Consolidate tools that do the same job, and get your data out of accounts you haven’t opened in six months.Security move: Turn on multi-factor authentication for your CRM and your email.Your reflection prompt: If a client asked you to show them every place their information lives in your business, could you do it? PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

  8. Oct 6

    100 Episodes In: What I've Learned and Where We're Going

    One hundred episodes! Since our first episode launched on February 20, 2025, this podcast has become a much bigger part of my life and our business than I ever expected. In this milestone episode, I'm reflecting on what the first 100 episodes have taught me about myself and about running a business, and sharing a few of the Big Bold Actions that will shape the next chapter of the show. In this episode, I talk about: Why podcasting is the perfect mix of writing and speaking for me, and how speech and debate prepared me for it (every episode is basically a mini debate party)Three lessons from 100 episodes: consistency is real and so is life, it's okay to re-evaluate, and having a roadmap mattersWhy I took last September off, and how I've stayed consistent with two episodes a week since JuneMy 100 Big Bold Actions list, inspired by my mentor Taylor Smith's 100 Big Asks for Power Table LiveThe story behind the name Beyond Product Management, and why a rebrand is coming around the new yearWhy I'm pausing new guest recordings this fall, and why being honest about your capacity is a business skillMy upcoming podcast and community speaking tour, featuring my talk Protect the Business You've BuiltOur goal of bringing on the podcast's first episode sponsorSome of my favorite unexpected episodes, from the women who shaped me to what my dad taught me about leading in productKey takeaway: Burning out helps no one. Knowing when to adjust, whether that's taking a month off or pausing guest interviews, is how you keep showing up at your highest potential. Want me on your podcast or in your community? I'm booking speaking opportunities for Protect the Business You've Built, a talk on why female entrepreneurs need security and the first five steps they need to take to protect what they've built. Reach out at hmiller@pdrmconsulting.com. PDRM Consulting's mission is to help businesses reduce risk, specifically in the fields of Cybersecurity and Product Management. Heather bridges the professional development gap in the corporate space by empowering growth-driven product managers to transition into strategic, results-oriented leaders. By focusing on enhancing key skills and decision-making capabilities, she helps them accelerate their leadership journey, achieve measurable outcomes more quickly, and excel in driving product success. Her approach ensures they thrive in their roles and unlock their full potential as impactful servant leaders within their organizations. You can follow us for more daily content: Instagram: @pdrmconsulting LinkedIn: https://www.linkedin.com/company/pdrm-consulting Join our Newsletter:https://solitary-block-17987.myflodesk.com/ofo6k6a0f9

See All (103)

About

Beyond Product Management is a podcast that explores the unexpected intersections of product management with other disciplines, industries, and ideas. We go beyond the usual frameworks to uncover fresh perspectives, unconventional insights, and the skills that truly set great PMs apart.

Information

  • Creator
    Heather Miller (PDRM Consulting)
  • Years Active
    2025 - 2026
  • Episodes
    103
  • Rating
    Clean
  • Copyright
    © 2026 PDRM Consulting All Rights Reserved.
  • Show Website
    Beyond Product Management