Tag: Risk Management

Why Good Security Strategies Fail: From Planning to Execution ft. Beth Leonard (Ep. 14)

Why Good Security Strategies Fail: From Planning to Execution ft. Beth Leonard (Ep. 14)

Cybersecurity requirements can feel expensive, complicated, and disconnected from daily operations. What changes when leaders treat compliance as ongoing risk management instead of paperwork?

In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, speak with Beth Leonard, Chief Operating Officer of R3 LLC, about turning cybersecurity strategy into consistent execution. 

Beth explains how CMMC, NIST 800-171, FedRAMP, ISO standards, formal risk management, and regular leadership reviews can become part of everyday operations. She also shares firsthand examples of what can happen when organizations delay controls, confuse documentation with implementation, or treat compliance as a checkbox.

Beth discusses:

  • How cybersecurity controls can reduce financial, reputational, and operational exposure across a business
  • Why formal business risk management can make compliance planning and implementation easier to manage
  • How documentation and assessments can fall short when controls aren’t embedded into daily operations
  • Why leadership participation and regular management reviews help cybersecurity plans move into execution
  • How organizations can prioritize limited time, budget, and people according to their highest business risks
  • And more!

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Beth Leonard:

What Cyber Psychology Teaches Us About Smarter Decision-Making ft. Rick Mishka (Ep. 10)

What Cyber Psychology Teaches Us About Smarter Decision-Making ft. Rick Mishka (Ep. 10)

Security incidents don’t usually start because someone is careless. They often start because someone is human, busy, tired, rushed, and trying to do the right thing.

In this conversation, Tony Pietrocola and Joe Marquette sit down with Rick Mischka, Head of Resilience and Senior Director of Education Enablement at AVANT Communications, to break down the psychology behind cybersecurity. They explore why people shouldn’t be dismissed as the “weakest link,” how attackers target attention and trust, and what leaders need to understand about building security programs around real human behavior.

Key takeaways:

  • How AI is accelerating cyber threats and security capabilities
  • Why the human element remains critical in cybersecurity
  • The role Zero Trust plays in reducing organizational risk
  • What business leaders should focus on as AI adoption grows
  • Practical ways to strengthen cyber resilience
  • And more!

Connect with Tony Pietrocola:

Connect with Joe Marquette:

Connect with Rick Mischka: