What security leaders said, week 13

March 23, 2026 to March 29, 2026 · 2 entries from 2 leaders

Grouped by topic: a week needs at least three entries before we draw up themes. Every person here is someone our record names as the current holder of a top security seat; role and company come from our record.

Teams and talent

1 entry on hiring, skills and building security teams.

March 24, 2026· Podcast appearance, CISO Series Podcast
Julie Myerholtz, Vice President – Chief Information Security Officer at Brunswick
On inclusion efforts in cybersecurity hiring and leadership
Why Highlight Diversity When We Can Just Hope You Don't Notice?
Our take
The guest is the CISO of Brunswick, listed with the title Vice President, Chief Information Security Officer. The episode's description lists four topics: shared responsibility in cloud, retiring long-held security practices, AI changing vendor economics, and receiving feedback. Cloud ownership is the one we would act on first: write down, per service, which controls sit with the provider and which sit with you, and test that map during incident exercises, because the gaps surface under pressure. On retiring long-held practices, we would add that every legacy control deserves a stated purpose and an owner, and anything that cannot name either should be scheduled for removal on a date. If AI is shifting what vendors can offer, renewal reviews should ask what the product does that a capable in-house team could now assemble, and what happens to your data if the vendor is acquired. We respectfully note that feedback culture is easiest to endorse and hardest to fund, so build a recurring channel for it rather than relying on goodwill. Watch whether vendor pricing and security questionnaires change as AI features become standard.
Listen at CISO Series Podcast ↗

Other subjects

1 entry on other subjects in security leadership.

March 25, 2026· Podcast appearance, CyberWire Daily
Dale Hoak, Chief Information Security Officer at RegScale
On privacy risks in phone calls and voice communications
Your private call isn’t so private.
Listen at CyberWire Daily ↗