Amit Megiddo

Hi, David.

It's great to be here.

Thanks for having us.

What is a CISO's real power?

Is a CISO really needed in a moment of crisis?

I've spoken to a few CISOs who challenged their employees with the question, what would you do if I wasn't there?

Quote, when your team says, we did it ourselves, you have achieved the highest level of leadership, said CISO Trey Craft in their newsletter.

Now, this philosophy also leans into the Socratic method of education.

You don't tell people what to do, but rather let them discover it on their own.

Maybe you have to guide them, but you let them come to a final decision.

Now, my father, who was a doctor, used to do this with his medical students.

They'd ask my father, what would he do?

And he didn't want to just tell them immediately.

He wanted them to look at the patient or the case study and figure it out for themselves.

So if they were missing a key piece of evidence, he would point it out to them.

So Andy, I will ask you the same thing.

How do you train your staff so they can think critically and ultimately not need you?

You know, Jerick Beeson says the same thing.

He has the challenge, what would Jerick think or what would Jerick do?

Jerick Beeson being the CISO of WM and a frequent guest and co-host on this show.