David Spark

That's a lateral game and no org chart position plays it for you.

Quote, if I only reported to the CISO, quote, isn't a structural critique.

It's an excuse.

So I'm going to start with you, Mike Mello, on this.

How should security leaders build cross-functional credibility before they have the positional authority to demand it?

So, I mean, literally, this is actually for someone who could be nowhere near the CISO position.

I'd like to know what they could do.

What do you think?

And everything you're saying, correct me if I'm wrong, is something anybody can talk about in security.

Like it doesn't have to be the CISO, correct?

That's a great line.

Oh, that's a quote we're keeping right there.

All right, Mike Johnson, try to beat that.

Good point.

Yeah.

So the people who do that are either making excuses or waiting for something so they can do something, which you shouldn't have to.

But okay, but I want to go back to the question I asked Mike, your advice for someone, even at the lowest levels in security, how they build this level of trust with others and that people will look to them even though they don't hold any specific title.

Well, that brings us to the end of the show.

And this was a fantastic episode.

Just packed with amazing advice.