Cybersecurity Refined and Feral

Candy Alexander and Cailin Sullivan

Cybersecurity Refined and Feral is a unique podcast hosted by a mother-daughter duo in cybersecurity, blending humor, candor, and expertise. They tackle pressing topics like cyberattacks, data privacy, and career challenges while offering practical advice and exploring the human side of tech, including relationships, workplace dynamics, and women in the field. With their generational perspectives—balancing seasoned insight and fresh innovation—they share how they learn from each other and navigate the evolving industry. Whether you're a professional, enthusiast, or curious listener, this podcast delivers insights, laughs, and a refreshing take on cybersecurity and life.

Episodes

  1. Oct 27

    CISO Survival Guide: Personal Liability, Burnout and What Comes Next?

    With the average CISO tenure hovering barely around two years, 70% of security executives reporting severe burnout, and personal legal liability on the rise, the modern CISO seat has become the hottest ticket in corporate tech. In this episode of Cybersecurity Refined and Feral, Candy and Cailin are joined by veteran security executive Larry Whiteside Jr. to pull back the curtain on the CISO career path: - The Evolution of the Seat: How the role shifted from the 1995 Citicorp breach into boardrooms, cyber insurance policies, and SEC disclosure deadlines. - The "Blamed for the Cut Finger" Dilemma: Larry’s defining analogy for why CISOs take breaches personally and how to transition from operational fall guy to consultative risk advisor. - Decoding Executive Presence: Why technical acumen in board meetings alienates leadership, and how to communicate cyber risk in plain business language. - Life After the CISO Seat: The real playbook on transitioning into fractional CISO work, board directorships, consultancies, and the reality behind VC/Field CISO roles. - Day 30 Playbook: How to build executive alliances by understanding how your C-suite peers are incentivized—and why finding a peer community like the CISO Society is your best defense against burnout. ⏱️ Timestamps 00:00 – Welcome back to Refined and Feral: The C-Suite’s Hottest Seat 00:28 – The Evolution: From Citicorp 1995 to SEC Deadlines & D&O Insurance 01:36 – Introducing Larry Whiteside Jr. (8-Time CISO & Cyversity Co-Founder) 03:08 – Origin Story: When Did the Job Stop Being an IT Gatekeeper? 06:16 – Cyber Liability Insurance & Learning to Walk IT Roadmaps Backwards 11:02 – The Knife-Fight Analogy: How CISOs Get Blamed for the Cut Finger 13:24 – Getting a Seat at Ideation: Overcoming "It's Too Early for Security" 17:31 – Decoding Executive Presence: Speaking Business vs. Tech Speak 24:40 – The 24-Month Turnover Trap: Are CISOs Fired or Burning Out? 27:47 – Disconnecting: Why It Took Larry 30 Years to Put the Phone Down 33:16 – Cailin’s Perspective: The Consultative CISO vs. Taking Incidents Personally 38:45 – Life After the Seat: Fractional Roles, Board Directorships & Consultancies 42:01 – The Truth About VC, Advisory, and "Field CISO" Marketing Roles 44:39 – Day 30 Advice: Social Engineering Your Peers & Building Trust Networks 51:34 – Finding Your Tribe: The CISO Society & Peer Communities 53:43 – Wrap-Up & Sign-Off: Stop Carrying the Pager for a House You Can’t Fix ***Work with Refined and Feral:Interested in sponsoring the podcast or appearing as a thought leadership guest? Contact Candy and Cailin directly at cybersecurity.refined@gmail.com.

  2. Oct 12

    The Silent Killer of AI: When the Data Crumbles

    If you work anywhere near tech, you’re hearing two topics on repeat: data privacy compliance and the frantic race to throw AI at literally everything. But most organizations get it backwards—treating data governance as a slow, painful regulatory tax or a security buzzkill. In this episode of Cybersecurity Refined and Feral, hosts Candy and Cailin sit down with veteran data leader and technologist Ted Bardasz (EMC, Aetna) to cut through the vendor hype and unpack the operational truth: If your data foundation is messy, your AI will just hallucinate faster, your security team will play endless defense, and your teams will drown in information chaos. Ted breaks down why clean data hygiene and disciplined data lineage are your real operational engine, how to implement a practical "data fabric" without turning your architecture into an untraceable bowl of spaghetti, and why managing data doesn't stop at the walls of your building. ⏱️ Timestamps 00:00 – The Hype vs. Reality: Compliance Tax or Operational Engine? 02:17 – The Real Operational Tax of Treating Governance as Friction 05:10 – The Myth of "Storage is Cheap": Why Data Hygiene Actually Matters 09:01 – Moving the Middle: Culture, Behavior, and the 5 S’s (Safety, Salary, Security, Stability, Structure) 16:13 – Stripping Away the Buzzwords: What is a Data Fabric, Really? 22:09 – Ditching the "Spaghetti Chart": Tracing the Life Cycle and Provenance of Data 25:40 – Black-Box Algorithms: Why Data Lineage is Your Only Defense for Explainable AI 29:48 – Autonomous Agents, Erased Logs, and the Death of Trust 33:59 – The Need for a Moral Fabric and Guardrails in Autonomous Systems 40:36 – The Hidden Dangers: Inherited Risk, Third-Party Data, and HIPAA Realities 45:36 – Practical Advice for Practitioners: Stepping Up Beyond the 9-to-5 48:46 – Final Takeaways: Before You Buy More Compute, Fix Your Data Plumbing 🔑 Key Takeaways 1. Garbage In, Amplified Chaos Out: You cannot build dependable, high-assurance AI on top of uncurated data dumps. Messy inputs yield fast, confident hallucinations. 2. From Spaghetti to Tablecloth: Traditional data lifecycle diagrams look like bowls of spaghetti. A true data fabric allows you to pull a single thread and trace provenance, metadata, and quality checks at every intersection. 3. Lineage is Your Explainability Recourse: When deep learning and agentic systems make aberrant decisions behind a black box, your primary audit trail is knowing exactly what data fed the outcome. 4. Governance Extends Past Your Perimeter: Your stewardship obligation doesn't stop inside your four walls—it follows the data when shared with third-party partners and downstream platforms. 🔔 Subscribe for weekly episodes on AI security, zero trust, governance frameworks, and data hygiene.

  3. Oct 6

    AI Armageddon: Fact or Fiction?

    Are we racing toward an AI apocalypse, or are we just sprinting blindly into unforced technical disasters? While headlines scream about superintelligence going rogue and senior safety researchers walk away from frontier labs, Washington and tech CEOs are repeating the same urgent message: We can’t slow down because we have to beat China. But when models start breaking out of evaluation sandboxes and hitting external servers, it raises the ultimate question: Do we slow down to ensure safety, or speed up to ensure victory—and at what cost? In this episode of Cybersecurity Refined and Feral, hosts Candy and Cailin sit down with Rock Lambros, CEO of RockCyber, to cut through the sci-fi doomsday noise and look at what is actually breaking in production. Rock breaks down why the real danger isn't sentient killer robots—it’s autonomous agents doing exactly what they were programmed to do inside networks with zero guardrails. From the OpenAI–Hugging Face sandbox breakout to the reality of White House voluntary accords, check-box compliance, and tested kill switches, this is an unvarnished masterclass in navigating agentic AI risk. ⏱️ Timestamps 00:00 – Intro: AI Safety vs. AI Security 10 Months Later 01:16 – Fact or Fiction: Researchers Quitting & The Sprint Against China 02:44 – Welcome Rock Lambros, CEO of RockCyber 04:08 – The 1950s Grand Canyon Moment for AI: Learning from Crashes 06:08 – Why Boards Rush to Deploy: The Two Immutable Laws of Business 08:44 – Washington's Regulatory Hodgepodge & Model Safety Drama 10:15 – Will It Take a Kinetic Disaster to Force Safety Guidelines? 11:54 – National Defense Realities: Why China Isn't Pumping the Brakes 13:28 – Historical Parallels: From PII and GDPR to Executive Orders 17:10 – The White House AI Accords: Genuine Guardrails or Morally Binding PR? 19:23 – The Missing Pieces: Compliance Checkboxes, Ethics, and PCI Lessons 23:22 – Could an "AMA" or "PCI DSS for AI" Ever Work? 28:45 – The Danger of False Balance: Moving Fast vs. Doing It Safely 30:30 – Unknown Blast Radiuses: Australian Medicare & Autonomous Cheat Codes 32:04 – How Transformers Work: Completing the Task by Any Means Necessary 35:27 – The Star Trek Lesson: Dr. Soong, Lore, Data, and Innovation Risk 37:55 – Unintended Consequences: Why Comparing AI to Nuclear Risk Fails 38:57 – Practical Engineering Baselines: OWASP Top 10 for AI & NIST Overlays 40:53 – ITSM Fundamentals: Visibility, Runtime Actions, and Broken Kill Switches 42:31 – The Agentic Tooling Landscape & The OWASP Agent Control Standard 45:16 – Where to Get Involved: GenAI Project, AI Exchange, and CSA 46:39 – The Final Verdict: Is AI Armageddon Fact or Fiction? 47:49 – Wrap-up: Kill Sockets, Check Permissions, and Stop Feeding Models Junk Data 🔗 Resources Mentioned in This Episode - OWASP GenAI Security Project: https://genai.owasp.org - OWASP AI Exchange (EU AI Act & Multimodal): https://owaspai.org - Cloud Security Alliance (CSA AI Initiatives) :https://cloudsecurityalliance.org - US Executive Order inaugurating the era of Super Intelligence: https://www.whitehouse.gov/presidential-actions/2026/09/inaugurating-the-era-of-super-intelligence/?utm_source=substack&utm_medium=email - AI 2027 (ai2027.com) #cybersecurity #AI #AgenticAI #AISafety #InfoSec #CybersecurityRefinedAndFeral #OWASP #DataHygiene #AIRegulation #RockCyber

  4. Sep 24

    AI Governance Illusion - Are you managing risk or staging compliance theater? With James Kavanagh

    Is your organization actually practicing AI Governance, or are you just running a fancy AIOps pipeline and calling it a day? In this episode of Cybersecurity Refined and Feral, Candy Alexander and Cailin Sullivan sit down with the ultimate "in-the-trenches" practitioner: James Kavanagh. As a former engineering leader at AWS and Microsoft, James delivered the world’s very first accredited ISO 42001 certification for a global technology platform. He’s here to expose the fluff, the buzzwords, and the massive disconnect between the people talking about AI governance and the few who are actually doing the work. If you think a list of "vanilla ethical principles" or an MLOps dashboard means your enterprise is safe, secure, and lawful—think again. 🎯 What We Dive Into: The Nomenclature Trap: Why the industry is desperately confusing day-to-day operational tools (AIOps, data cleaning, patching) with systemic risk governance.Talkers vs. Doers: James breaks down why the actual builders are less confused than the consultants, and why we are repeating the exact same "compliance vs. security" mistakes we made in cyber 15 years ago.The 8 Disciplines of True Oversight: Why you can't just condense AI oversight into a single role or siloed department, and how to embed it where the work actually happens.The 3 Leaps of an AI Career: James maps out the fascinating trajectory of the modern AI practitioner—from getting "book smart" to mastering the human dimension of influence and leadership.The Five Eyes Warning: Why the latest intelligence advisories aren't just about securing your AI, but defending your entire infrastructure against AI threats. The Bottom Line: Don't let the talkers confuse you. Tune in to learn how to step away from the corporate "AI Constitution" binder and start building practical, street-level adaptive mechanisms that actually hold under pressure. 🔗 Connect with James Kavanagh: Website & Practitioner Assessment: Head over to AICareer.pro to take the organizational or practitioner assessment and see where you stand on the path to mastery!Read His Insights: Check out the master practitioner deep-dives on the AI Career Pro blog. 💥 Join the Refined & Feral Community:If this conversation helped you cut through the industry noise, make sure to Like, Comment, and Share this episode with your network! Subscribe for more open, gritty, and executive-level conversations where refinement meets chaos in the digital world. Stay safe, stay secure, stay refined... ...and don't be afraid to get a little bit feral! #AIGovernance #Cybersecurity #AIOps #ArtificialIntelligence #RiskManagement #ISO42001 #WomenInCyber #Podcast

  5. Feb 16

    Decoding the AI Rosetta Stone: Inside the OWASP AI Exchange

    Is AI governance dead, or was it never actually alive? In this episode of Cybersecurity Refined and Feral, Candy and Cailin tackle the "elephant in the room"—Artificial Intelligence. While organizations are rushing to deploy AI at breakneck speed, the security guardrails are often left in the dust. To help us navigate this "Wild West," we are joined by two industry titans: Aruneesh Salhotra, a fractional CISO and global community builder, and Rock Lambros, CEO of RockCyber and author of The CISO Evolution. Our guests pull back the curtain on the OWASP AI Exchange, a groundbreaking open-source project that serves as the "Rosetta Stone" for AI security. We move beyond the hype of GenAI to discuss how this framework provides over 300 pages of practical guidance for securing analytical, discriminative, and agentic AI systems. In this episode, we discuss: - The Evolution of OWASP: How a foundation built for web apps is adapting to the AI era. - Beyond the Top 10: Why the AI Exchange is a comprehensive framework rather than just a list of vulnerabilities. - The "Agentic" Threat: What happens to security when AI starts taking tangible actions instead of just answering questions. - Data Security on Steroids: Why AI governance is fundamentally rooted in "bagging and tagging" your data. - Global Impact: How the project is feeding directly into international standards like the EU AI Act. Whether you are a CISO trying to explain AI risks to the board or a developer looking for actionable controls like the "Periodic Table of AI Security," this episode provides the map you need to move from "feral" chaos to "refined" resilience. Resources Mentioned: - OWASP AI Exchange: http://www.owaspai.org - Connect with Aruneesh Salhotra: https://www.linkedin.com/in/aruneeshsalhotra/ - Connect with Rock Lambros: https://www.linkedin.com/in/rocklambros/

    Decoding the AI Rosetta Stone: Inside the OWASP AI Exchange

  6. Feb 3

    The "Hard Truth" of a SOC 2: Business Necessity or Total Waste of Money?

    Is a SOC 2 attestation a vital proof of security or just a "rubber stamp" to keep procurement happy? In our latest episode of Cybersecurity Refined and Feral, Candy Alexander and Cailin join industry expert Rob to uncover the "Hard Truth" about the ROI of compliance. We dig into the messy reality of audits, including: - The Cost of Doing Business: Why SOC 2 is often the non-negotiable entry fee for selling to large enterprises. - The "Magic Genie" Myth: Why GRC tools won't save you if you haven't made the philosophical shift to prioritize security every day. - Operational Awareness: How the audit process actually teaches engineering and operations teams what they are supposed to be doing. - The Power of Risk Assessments: How simply writing down your risks creates a "persuasion effect" that helps management prioritize security. Whether you are a startup founder looking for a framework or a CISO navigating the "point-in-time" audit grind, this conversation is for you.

    The "Hard Truth" of a SOC 2: Business Necessity or Total Waste of Money?

  7. 09/30/2025

    Beyond the Buzzwords: The Truth About the Cyber Job Market

    The cyber job market feels broken, doesn't it? Everyone says there's a talent shortage, but résumés are getting lost in a sea of applicants, and qualified pros can't seem to find a job. In this no-BS episode of Cybersecurity Refined & Feral, we cut through the noise and get to the truth behind the hiring crisis. We're joined by recruitment specialist Wayne Daley and ISSA New England Chapter VP Dan Bailey to give you the real story. In this candid discussion, we tackle the paradox head-on: - The AI/ML problem: How technology is both helping and hurting the job search, creating a "keyword challenge" for both applicants and recruiters. - The rise of fractional C-suite roles: We discuss the pros and cons of this trend and why some organizations are turning to it. - The overabundance of applicants: We explore why so many job postings are overwhelmed with unqualified respondents and how this impacts the hiring process. - This episode isn't just about identifying the problems; it's about providing real solutions. We'll give you actionable advice on: - Hacking the system: How to craft a resume that gets past the bots and lands on a human's desk. - The power of networking: Why building a face-to-face network (even virtually) is more crucial than ever. Whether you're an employer struggling to find the right talent or a professional looking to make your next career move, this episode is a must-listen. It's time to stop complaining about the problem and start implementing the solution. Guest Information - Wayne Daley is a veteran recruitment specialist with deep insights into the cybersecurity talent market. - Dan Bailey is the Vice President of the ISSA New England Chapter and a seasoned professional with a strong understanding of industry trends and community building.

    Beyond the Buzzwords: The Truth About the Cyber Job Market
  • 7 Episodes

About

Cybersecurity Refined and Feral is a unique podcast hosted by a mother-daughter duo in cybersecurity, blending humor, candor, and expertise. They tackle pressing topics like cyberattacks, data privacy, and career challenges while offering practical advice and exploring the human side of tech, including relationships, workplace dynamics, and women in the field. With their generational perspectives—balancing seasoned insight and fresh innovation—they share how they learn from each other and navigate the evolving industry. Whether you're a professional, enthusiast, or curious listener, this podcast delivers insights, laughs, and a refreshing take on cybersecurity and life.

Information

  • Creator
    Candy Alexander and Cailin Sullivan
  • Years Active
    2025 - 2026
  • Episodes
    7
  • Rating
    Clean
  • Copyright
    © 2026 Candy Alexander and Cailin Sullivan
  • Show Website
    Cybersecurity Refined and Feral