Cyber Smokehouse

About Cyber Smokehouse

This is Cyber Smokehouse. Join Ernie and Graeme as they grill the minds, dig into the experience, and serve up the stories of leaders in cybersecurity. Cyber Smokehouse is sponsored by TBDCyber, a cybersecurity strategy consulting firm.

Publisher

TBDCyber

Category

business · technology

Language

en

Explicit

No

First episode

27 Jan 2026

Latest episode

3 Nov 2026

Latest episodes

36 episodes in the feed.

1. 

   3 Nov 2026

   Getting Security Out of IT - Tim Callahan - Cyber Smokehouse - Episode #35

   Take your security leadership, board reporting, and emerging technology governance to the next level with pragmatic wisdom from a veteran who spent 22 years in military Explosive Ordnance Disposal (EOD) before leading global technology and cyber resilience for Fortune 500 enterprises. It’s time to stop chasing every shiny headline and start building an adaptable operational foundation that absorbs modern technological disruption. Who better to guide you through this transition than former Aflac Global CISO & CIO, NTSC Co-Founder, and 2026 Technology Association of Georgia Board Chair, Tim Callahan? You will learn why standing up standalone AI committees creates unnecessary administrative sprawl, how to manage the friction between CIO and CISO priorities by separating budgets and reporting structures, and why mastering the fundamentals of access control protects you against AI threats just as it did with early PDAs and virtual servers. Get motivated to cut down board slide decks, invest in internal talent succession, and master the discipline of knowing where an "A+" is required and where "good enough" provides optimal business defense! Takeaways: The "Great at Being Good Enough" Philosophy: In an environment of finite budgets, security leaders must distinguish between operational controls that require an A+ (preventing and responding to attacks) versus areas where baseline compliance (a "C") is completely sufficient. Absorb Innovation Through Existing Governance: Rather than creating ad hoc committees for every new trend, Aflac scaled AI governance by expanding the mandate of its existing Data Protection and Privacy Subcommittee. Access Control as the Universal Anchor: Whether defending against Trojan horses, securing 2000s-era mobile devices, or permissioning autonomous AI agents, foundational access control ("deny all except as permitted") remains the primary security barrier. Separating Security from the IT Chain: True operational independence requires separating security budgets and reporting lines from IT operations - ideally routing CISO reporting to a General Counsel or Chief Risk Officer. Board Communication Through Conversation: Successful board briefings rely on executive brevity and high-level conversational engagement; bury dense regulatory checklists in the appendix and never get bogged down in technical metric weeds. Quote of the Show: "One thing that I've learned in life is you've got to be really great at being good enough... It's not a call to mediocracy. It's a call to know what you have to have an A+ in and where a C is just fine." - Tim Callahan Links: LinkedIn: https://www.linkedin.com/in/tim-callahan-4b39241/ Website: http://www.ntsc.org (https://www.linkedin.com/safety/go/?url=http%3A%2F%2Fwww%2Entsc%2Eorg&urlhash=hvIi&mt=idzlivIe0fmLyuH3mO_EXyOmTEtms5WMwr4kNz51WGnLFYg7PcKWiSncXBi53saP5p7hgvCsg2eBv06nK00cKyljxArLR_F6SixgqiBWWBj7yYoYbahpzBWxw7gzIl-a_l3VL5m8QAzKX6wMHLpbJlx-wY8OaMlNaftCjL6cJ9Ry&isSdui=true) Ways to Tune In: Spotify: https://open.spotify.com/show/5LuXXqbK9k9rrVRFsdGzl0 (https://open.spotify.com/show/5LuXXqbK9k9rrVRFsdGzl0) Apple Podcasts: https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297 (https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297) Amazon Music: https://music.amazon.com/podcasts/40a6c0da-242f-404b-8bd3-9f4997f19c47 (https://music.amazon.com/podcasts/40a6c0da-242f-404b-8bd3-9f4997f19c47) iHeart Radio: https://iheart.com/podcast/319629841/ (https://iheart.com/podcast/319629841/) Podchaser: https://www.podchaser.com/podcasts/cyber-smokehouse-6356550 (https://www.podchaser.com/podcasts/cyber-smokehouse-6356550)

2. 

   27 Oct 2026

   Vulnerability Velocity - Jim Covington - Cyber Smokehouse - Episode #34

   Take your security program maturity, cyber risk quantification, and board reporting to the next level with practical insights on advancing beyond baseline frameworks, governing rapid AI adoption, and building continuous operational resilience. It’s time to move past chasing every "shiny new toy" and refocus your strategy on core hygiene, financial risk translation, and actionable metrics. Who better to guide you through this transition than Qualcomm Cybersecurity Program Strategy Lead, former digital health DPO, and Qualified Technology Executive (QTE), Jim Covington? You will learn why aiming for a level 5 maturity across every NIST CSF domain isn't always the right business move, how to translate technical security gaps into financial loss metrics that boards care about, and why continuous system rollover is replacing legacy 30-day patch cycles. Get motivated to cut through reporting noise, implement AI governance with real teeth, and build security programs designed for ultimate business resilience! Takeaways: Targeted NIST CSF Maturity: Organizations don't need a 5.0 maturity rating across every domain; target high maturity for critical functions like Incident Response and balance other domains around business risk appetite. Speaking the Board's Financial Language: Technical scores and 1-to-5 heatmaps no longer cut it; converting cyber risk into potential financial loss or gain is essential for securing executive buy-in. The Perils of Chasing "Shiny Toys": Leaders often chase cloud, machine learning, or generative AI while neglecting basic cyber hygiene; mastering 80% to 90% of the CIS Top 10 remains the most effective defense. Continuous Rollovers vs. Patch Tickets: With zero-day exploit velocity shrinking, traditional ticketing to IT teams is failing; continuous 24- to 48-hour automated system updates represent the future of vulnerability management. AI Governance Requires Real Teeth: While organizations rush to deploy AI agents and tools, steering committees often lack the purview and enforcement mechanisms needed to manage internal and external data risks. Quote of the Show: "The risk needs to be converted into financial loss or gain in order for the executives and boards to really take notice and understand, to be able to speak their language." - Jim Covington Links: LinkedIn: https://www.linkedin.com/in/covingtonsd/ Website: https://www.qualcomm.com/ (https://www.qualcomm.com/) Ways to Tune In: Spotify: https://open.spotify.com/show/5LuXXqbK9k9rrVRFsdGzl0 (https://open.spotify.com/show/5LuXXqbK9k9rrVRFsdGzl0) Apple Podcasts: https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297 (https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297) Amazon Music: https://music.amazon.com/podcasts/40a6c0da-242f-404b-8bd3-9f4997f19c47 (https://music.amazon.com/podcasts/40a6c0da-242f-404b-8bd3-9f4997f19c47) iHeart Radio: https://iheart.com/podcast/319629841/ (https://iheart.com/podcast/319629841/) Podchaser: https://www.podchaser.com/podcasts/cyber-smokehouse-6356550 (https://www.podchaser.com/podcasts/cyber-smokehouse-6356550)

3. 

   20 Oct 2026

   The Science of Security Leadership - Jim O’Connell - Cyber Smokehouse - Episode #33

   Take your security leadership, IoT risk modeling, and board communication strategies to the next level with practical insights on protecting fleet computers, simplifying cyber risks for underserved markets, and preparing for quantum acceleration. It’s time to stop acting as the "land of no" and start grounding complex technical threats in clear, business-aligned risk terms. Who better to guide you through this transition than former Old Dominion Freight Line CISO, former Federal Reserve System Chief Architect, and 2025 Carolina CISO Orbie finalist, Jim O'Connell? You will learn why physical transport devices present "killware" risks beyond traditional financial ransomware, how low-tech vectors like ham radio frequencies can impact heavy fleet operations, and how to extend corporate security awareness to protect employees' families and small businesses. Get motivated to simplify your board reporting, prepare your infrastructure for quantum-ready encryption, and build adaptable security teams that enable business growth! Takeaways: Protecting Underserved Communities: Cyber awareness must extend beyond corporate walls to educate small business owners and individuals who lack access to dedicated security resources. Killware & Fleet IoT Vectors: In transportation and industrial IoT, the primary threat shifts from financial ransomware to "killware" - where low-tech vectors like radio frequencies can impact physical braking systems. Extending Family Cyber Wellness: Encouraging employees to share corporate security awareness training with their families creates a safer environment at home and reduces personal stressors brought into the workplace. Security Is Not the "Land of No": CISOs must avoid blocking business initiatives; instead, they should present alternative paths that balance risk with business enablement. Preparing for Quantum Acceleration: AI is accelerating quantum development timelines, requiring CISOs to inventory assets and prepare for rapid certificate and encryption refresh cycles today. Quote of the Show: "Security can't be the land of no. The second that you're the land of no, somebody's finding a way around you." - Jim O'Connell Links: LinkedIn: https://www.linkedin.com/in/jamesmichaeloconnell/ Website: https://odfl.us/ShipWithUs_li (https://odfl.us/ShipWithUs_li) Ways to Tune In: Spotify: https://open.spotify.com/show/5LuXXqbK9k9rrVRFsdGzl0 (https://open.spotify.com/show/5LuXXqbK9k9rrVRFsdGzl0) Apple Podcasts: https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297 (https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297) Amazon Music: https://music.amazon.com/podcasts/40a6c0da-242f-404b-8bd3-9f4997f19c47 (https://music.amazon.com/podcasts/40a6c0da-242f-404b-8bd3-9f4997f19c47) iHeart Radio: https://iheart.com/podcast/319629841/ (https://iheart.com/podcast/319629841/) Podchaser: https://www.podchaser.com/podcasts/cyber-smokehouse-6356550 (https://www.podchaser.com/podcasts/cyber-smokehouse-6356550)

Reach and audience

Public platform figures. Ratings count people who left a rating, not total listeners.

Spotify

5.0 / 5

1 ratings

Contact Cyber Smokehouse

Guest appearances

Books guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.