Tag: Cybersecurity Strategy
Why Good Security Strategies Fail: From Planning to Execution ft. Beth Leonard (Ep. 14)

Why Good Security Strategies Fail: From Planning to Execution ft. Beth Leonard (Ep. 14)

By |

Cybersecurity requirements can feel expensive, complicated, and disconnected from daily operations. What changes when leaders treat compliance as ongoing risk management instead of paperwork?

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, speak with Beth Leonard, Chief Operating Officer of R3 LLC, about turning cybersecurity strategy into consistent execution. 

Beth explains how CMMC, NIST 800-171, FedRAMP, ISO standards, formal risk management, and regular leadership reviews can become part of everyday operations. She also shares firsthand examples of what can happen when organizations delay controls, confuse documentation with implementation, or treat compliance as a checkbox.

Beth discusses:

  • How cybersecurity controls can reduce financial, reputational, and operational exposure across a business
  • Why formal business risk management can make compliance planning and implementation easier to manage
  • How documentation and assessments can fall short when controls aren’t embedded into daily operations
  • Why leadership participation and regular management reviews help cybersecurity plans move into execution
  • How organizations can prioritize limited time, budget, and people according to their highest business risks
  • And more!

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Beth Leonard:

Podcast: Play in new window | Download | Embed

Subscribe: RSS | More
Lost in Translation: Turning Cyber Risk Into Executive Action (Ep. 3)

Lost in Translation: Turning Cyber Risk Into Executive Action (Ep. 3)

By |

Cybersecurity doesn’t fail because of weak tools. It fails because of weak translation.

When executives hear acronyms instead of impact, critical decisions stall.

In this episode of Zero Trust Issues, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, sit down with seasoned CISO Lee Buttke to unpack one of the most overlooked risks in modern cybersecurity: the communication gap between technical teams and business leadership.

Drawing from real-world incident experience, Lee shares how overly technical reporting during a breach created confusion at the executive level, and what security leaders should focus on instead.

Key Takeaways:

  • Why cyber acronyms like TTPs can derail executive understanding
  • The difference between technical reporting and business impact reporting
  • How to communicate containment, exposure, and operational disruption clearly
  • Why cybersecurity maturity frameworks create alignment across leadership
  • How assigning a monetary value to cyber risk drives smarter decisions
  • The role of the CISO in elevating cybersecurity conversations to the board level
  • Why resilience in 2026 depends on proactive communication, not reactive defense
  • And more!

Connect with Tony Pietrocola:

Connect with Lee Buttke:

Podcast: Play in new window | Download | Embed

Subscribe: RSS | More