About The Art of Cybersecurity: Real-World Risk & Compliance Strategies
Cybersecurity is as much art as science. The hard part is not knowing another framework or buying another tool. It is figuring out what actually matters, making good tradeoffs, and building security that works with real-world limits on time, budget, people, and technology. On The Art of Cybersecurity, Cheri Hotman explores the judgment, creativity, leadership, and practical problem-solving behind cybersecurity that actually protects the business. Expect candid conversations about cyber risk, Cyber GRC, governance, compliance, technology, audits, AI, leadership, and the messy reality of making
GRC Is Cybersecurity: Why Compliance Alone Isn’t Enough with Mea Clift
What happens when organizations start treating compliance as the goal instead of using it as one piece of a stronger cybersecurity program?
In this episode of The Art of Cybersecurity, Hotman Group CEO Cheri Hotman sits down with GRC leader and educator Mea Clift for a candid conversation about what governance, risk, and compliance (GRC) should actually look like in practice.
Cheri and Mea dig into why passing an audit doesn’t necessarily mean an organization is secure, how risk should drive cybersecurity priorities, and why frameworks, tools, and maturity scores can create a false sense of security when they become the objective instead of the input.
They also explore cybersecurity budgeting and return on security investment, vendor and technology decisions, what effective cyber leadership really requires, and the importance of trust, integrity, mentorship, and continuous learning in the profession.
In this episode:
• Why GRC is part of cybersecurity — not just compliance documentation• Compliance vs. actual security• Using risk to prioritize cybersecurity investments• Why “cheap, fast, and easy” doesn’t work in cyber• Communicating cybersecurity risk to business and financial leaders• What makes an effective cybersecurity leader• Building trust and integrity into cybersecurity programs• Developing the next generation of GRC professionals
At its core, the conversation comes back to one idea: cybersecurity isn’t about checking the final box. It’s about continuously making better, risk-informed decisions and moving the organization forward.
Learn more about Hotman Group at hotmangroup.com
12 Jun 2026
AI Is Still Just a System: A Practical Approach to Governance
In this episode, Cheri Hotman sits down with Diane Jones to explore the intersection of cybersecurity, engineering, and artificial intelligence. Drawing on her background in systems engineering and security, Diane shares her journey into AI governance and discusses how organizations can move beyond the hype and fear surrounding AI to focus on practical, actionable risk management. From NIST and ISO frameworks to developing her own AI admissibility framework, Diane offers valuable insights into building trustworthy, governable AI systems that deliver real business value.
16 Mar 2026
The Art of Cybersecurity: Why Governance Is More Than Checklists
In this episode of The Art of Cybersecurity, Cheri Hotman sits down with GRC leader Jerry Koshy for an honest, practitioner-to-practitioner conversation about what it really takes to build effective cybersecurity and risk programs.
While compliance and risk management often get framed as rigid processes or box-checking exercises, Cheri and Jerry explore why the most impactful work in GRC is actually an art form—one that requires leadership, communication, and the ability to align people across an organization.
Together they discuss:
Why governance is often the most overlooked part of GRC
How cybersecurity professionals must act as business enablers, not roadblocks
The role of culture, buy-in, and relationship building in successful security programs
Why many organizations struggle with audits and third-party risk management
How strong GRC programs focus on continuous improvement, not just passing audits
They also dig into the realities of burnout in the field, the importance of emotional intelligence in leadership, and why the best cybersecurity programs succeed because of people—not just technology.
This episode is a candid look at the human side of cybersecurity, and why building secure organizations requires both science and art.
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Apple Podcasts (US)
4.7 / 5
3 ratings
Spotify
5.0 / 5
2 ratings
Contact The Art of Cybersecurity: Real-World Risk & Compliance Strategies
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of The Art of Cybersecurity: Real-World Risk & Compliance Strategies?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
