# Kayne McGladrey, CISSP > Cybersecurity Advisor • Author of the GRC Maturity Model • Senior IEEE Member • Virtual CISO ## Posts - [Aflac Data Breach Lawsuit Survives Motion to Dismiss, Heads to Discovery](https://kaynemcgladrey.com/blog/aflac-data-breach-lawsuit-survives-motion-to-dismiss-heads-to-discovery.md): On August 12, 2026, Judge Clay D. Land of the U.S. District Court for the Middle District of Georgia handed down an order Aflac had been fighting to avoid. The... - [Your Local AI Model Might Be the Next Attacker](https://kaynemcgladrey.com/blog/your-local-ai-model-might-be-the-next-attacker.md): While the security press spent July transfixed by frontier lab agents escaping their sandboxes, somebody built a working offensive AI system from parts anyone... - [Local AI Solves a Privacy Problem, Not a Discovery Problem](https://kaynemcgladrey.com/blog/local-ai-solves-a-privacy-problem-not-a-discovery-problem.md): Open-weight models have gotten good. Really good. Meta's Muse Glimmer, Nvidia's Nemotron 3.5 Lightning, and releases from Chinese AI labs like Moonshot AI and... - [Order Express Paid $250K Because Nobody Owned the Risk](https://kaynemcgladrey.com/blog/order-express-paid-250k-because-nobody-owned-the-risk.md): If "cyber risk" is a myth, why did Order Express, Inc. just pay $250,000 to settle with the New York State Department of Financial Services (NYDFS) over... - [Halfway Through 2026, AI Regulation Is No Longer Theoretical](https://kaynemcgladrey.com/blog/halfway-through-2026-ai-regulation-is-no-longer-theoretical.md): The second half of 2026 brings hard deadlines, so if you're still treating AI laws as a planning exercise, it's time to start operationalizing them. On both... - [The Ninth Circuit’s CFAA Ruling in Amazon v. Perplexity](https://kaynemcgladrey.com/blog/the-ninth-circuits-cfaa-ruling-in-amazon-v-perplexity.md): While I was at Black Hat and BSides, the appeals court vacated Amazon's injunction against Perplexity's Comet browser. However, the reasoning turns on a narrow... - [What Actually Stuck After Four Days in Vegas](https://kaynemcgladrey.com/blog/what-actually-stuck-after-four-days-in-vegas.md): I'm writing this during my connection at SEA, waiting on a flight out after four days at BSides and Black Hat. I'm still processing, and honestly I'm not sure... - [Three Days of Noise, Some Actual Signal](https://kaynemcgladrey.com/blog/three-days-of-noise-some-actual-signal.md): Writing in the first person is exhausting; normal legal and regulatory commentary resumes Friday. My morning started with a phone call to ISSA Vancouver. We're... - [What the Slides Didn’t Show at BSides](https://kaynemcgladrey.com/blog/what-the-slides-didnt-show-at-bsides.md): BSides, the community-run counterpoint to Black Hat, opens with a live DJ, fresh coffee at 9 AM, and a room that's actually pleasant. No QR code badges hanging... - [Night One at Black Hat 2026](https://kaynemcgladrey.com/blog/night-one-at-black-hat-2026.md): Instead of my usual regulatory and legal commentary, I'll be posting daily content from Black Hat / BSides through Thursday. Arrival at LAS Waiting at baggage... - [AI Standards Will Fracture Further By 2035](https://kaynemcgladrey.com/blog/ai-standards-will-fracture-further-by-2035.md): On July 16, 2026, an OpenAI model escaped its sandbox, exploited a zero-day vulnerability in a package proxy, and breached Hugging Face just to cheat on a... - [Eight TPRM Questions That Actually Matter for AI Vendor Selection](https://kaynemcgladrey.com/blog/eight-tprm-questions-that-actually-matter-for-ai-vendor-selection.md): Traditional vendor risk management assumes vendors and their products will behave as advertised. Third-party risk (TPRM) programs normally evaluate data... - [Design Your Progress Measurement System](https://kaynemcgladrey.com/resources/design-your-progress-measurement-system.md): Would you rather watch this on YouTube? Most security teams can't prove they're improving. They track vulnerabilities, incidents, and compliance checkboxes,... - [Smart Glasses Get Banned in Courts and Conferences – Should Your Workplace Follow?](https://kaynemcgladrey.com/blog/smart-glasses-get-banned-in-courts-and-conferences-should-your-workplace-follow.md): New York just became the first state to ban AI-enabled smart glasses across all 1,200+ state courthouses, and DEF CON 2026 did the same thing, calling them... - [Heading to DEF CON? Don’t Trust the Network](https://kaynemcgladrey.com/blog/heading-to-def-con-dont-trust-the-network.md): Every August, tens of thousands of security professionals flood Las Vegas for Black Hat, BSides, and DEF CON. The industry has spent the last two years... - [The Quantum Liability You Already Have](https://kaynemcgladrey.com/blog/the-quantum-liability-you-already-have.md): I was preparing for a call with the board of a post-quantum cryptography (PQC) company and, as a part of preparing, reviewed all my prior research into PQC.... - [The Accountability Void](https://kaynemcgladrey.com/blog/the-accountability-void.md): It's been a long week of AI news, so I want to step back and put the Hugging Face / OpenAI incident into the larger context. As a reminder, I'm not an attorney... - [Writing Your 2027 Security Budget After AI Vendors Set the House on Fire](https://kaynemcgladrey.com/blog/writing-your-2027-security-budget-after-ai-vendors-set-the-house-on-fire.md): If you're a CISO building your 2027 budget, you already know the old axiom: never let a good cybersecurity incident go to waste. Two incidents from this year... - [Security Communication Playbook: Making Security Reports That People Actually Read](https://kaynemcgladrey.com/resources/security-communication-playbook-making-security-reports-that-people-actually-read.md): So many words! Would you rather just watch this on YouTube? Security professionals have a communication problem they've earned because they produce detailed... - [When The Arsonist Sells Fire Insurance](https://kaynemcgladrey.com/blog/when-the-arsonist-sells-fire-insurance.md): On July 16, 2026, Hugging Face disclosed a security incident unlike anything in their history where their production infrastructure had been compromised by an... - [When Criminals Pretend to Be the FBI to Steal From Victims Again](https://kaynemcgladrey.com/blog/when-criminals-pretend-to-be-the-fbi-to-steal-from-victims-again.md): The FBI's Internet Crime Complaint Center just released a Public Service Announcement updating an earlier alert about scammers impersonating IC3 personnel. The... - [What the SANS 2026 AI Survey Actually Tells Us](https://kaynemcgladrey.com/blog/what-the-sans-2026-ai-survey-actually-tells-us.md): Every security survey released in 2026 has told roughly the same story: AI adoption's moving fast while governance crawls behind, and executives see things... - [The Robot Vacuum That Should Have Stayed Offline](https://kaynemcgladrey.com/blog/the-robot-vacuum-that-should-have-stayed-offline.md): It's Friday, and instead of my usual regulatory/legal analysis, I thought some Hollywood stunt hacking might be a nice change of pace. For example, a device... - [The AI Cyberattack Threat Is Real. The “Lock It in a Lab” Story Isn’t.](https://kaynemcgladrey.com/blog/the-ai-cyberattack-threat-is-real-the-lock-it-in-a-lab-story-isnt.md): There's a new RAND paper out where Michael Sulmeyer argues that artificial intelligence is about to unlock strategic cyber capabilities that have been stuck at... - [Turning Vulnerability Scans Into Budget Approvals](https://kaynemcgladrey.com/resources/turning-vulnerability-scans-into-budget-approvals.md): Rather watch this on YouTube instead? Security teams live in a world of numbers where a scanner runs, finds a hole, and gives you a score. That score is... - [Pentagon Pulls Emergency Brake on CMMC Phase II Certification](https://kaynemcgladrey.com/blog/pentagon-pulls-emergency-brake-on-cmmc-phase-ii-certification.md): The Department of War hit pause on CMMC Phase II third-party certification requirements on July 13, 2026. The November 10, 2026 deadline is suspended... - [Quantum Won’t Break Your Encryption Tomorrow, But the Bill Is Already Coming Due](https://kaynemcgladrey.com/blog/quantum-wont-break-your-encryption-tomorrow-but-the-bill-is-already-coming-due.md): Quantum computing's having a moment this summer. France's cybersecurity agency ANSSI announced it'd stop certifying security products lacking quantum-resistant... - [The Productivity Gap Is a Data Quality Gap](https://kaynemcgladrey.com/blog/the-productivity-gap-is-a-data-quality-gap.md): "Workflow integration was an underestimated challenge early in our AI adoption journey. While a lot of processes looked simple on paper, there are many... - [Stop Treating AI Like Magic and Start Treating It Like a Vendor](https://kaynemcgladrey.com/blog/stop-treating-ai-like-magic-and-start-treating-it-like-a-vendor.md): On the evening of June 12, 2026, Anthropic disabled its two most capable models, Claude Fable 5 and Mythos 5, for every customer on the planet. Not because of... - [Manufacturing Keeps Getting Hit While Everyone Watches AI Zero-Days](https://kaynemcgladrey.com/blog/manufacturing-keeps-getting-hit-while-everyone-watches-ai-zero-days.md): "The notion of a criminal ransomware group retaining lawyers fully versed in international data requirements is absurd -- until you realize the 'lawyer' is an... - [Security Governance Maturity Assessment Without the Guesswork](https://kaynemcgladrey.com/resources/security-governance-maturity-assessment-without-the-guesswork.md): Security Governance Maturity Assessment Without the Guesswork So many words! Wouldn't you rather just watch this on YouTube? Most organizations can't answer a... - [The Hiring Funnel Is Leaking And Criminals Are Profiting](https://kaynemcgladrey.com/blog/the-hiring-funnel-is-leaking-and-criminals-are-profiting.md): It's mid-July 2026, and the domestic job market isn't exactly improving, based on a set of IOCs (indicators of compromise) that a friend sent me yesterday. Job... - [78% Already Got Hit. Half Still Haven’t Funded the Fix.](https://kaynemcgladrey.com/blog/78-already-got-hit-half-still-havent-funded-the-fix.md): 78% of organizations reported experiencing AI-related security incidents or identifying AI-related vulnerabilities. — DigiCert AI Trust Outlook I guess it's... - [Why Breach Cover-Ups Are Killing Trust](https://kaynemcgladrey.com/blog/why-breach-cover-ups-are-killing-trust.md): If you ask security leaders whether they've ever been told to keep a breach quiet (we did), more than half will say yes. BitDefender's out with their 2026... - [Washington Had the Playbook and the Polling. It Passed on Almost None of It](https://kaynemcgladrey.com/blog/washington-had-the-playbook-and-the-polling-it-passed-on-almost-none-of-it.md): "AI systems that are deployed for high-risk decision making should be subject to enhanced oversight, transparency, and accountability measures to mitigate... - [Opportunity Cost Analysis: The Security Tool Your CFO Actually Wants to See](https://kaynemcgladrey.com/resources/opportunity-cost-analysis-the-security-tool-your-cfo-actually-wants-to-see.md): Opportunity Cost Analysis: The Security Tool Your CFO Actually Wants to See So many words, wouldn't you rather just watch this? Every security leader knows the... - [When the Load-Bearing Wall Comes Down](https://kaynemcgladrey.com/blog/when-the-load-bearing-wall-comes-down.md): Key quote: Max Schrems: "Given that there are no independent authorities in the US anymore, we call on the European Commission to orderly withdraw the adequacy... - [Your AI Governance Program Can’t Stop Anything](https://kaynemcgladrey.com/blog/your-ai-governance-program-cant-stop-anything.md): Key quote: A fire alarm is not a fire department. You can wire every room in your house, dutifully change the battery of every smoke detector annually, and... - [When Vendors Fail, Everyone Pays](https://kaynemcgladrey.com/blog/when-vendors-fail-everyone-pays.md): Key quote: Importantly, there is no current evidence that PII or payment and financial account information was accessed, including credit card or banking... - [When AI Strategies Collide with Real Bills](https://kaynemcgladrey.com/blog/when-ai-strategies-collide-with-real-bills.md): Key quote: "AI is a powerful force multiplier, but the judgment, relationships and accountability remain human, and that won't change." Thompson-Reuters is out... - [Why California Law Just Went Global for HR Tech](https://kaynemcgladrey.com/blog/why-california-law-just-went-global-for-hr-tech.md): Key quote: Holding business-entity agents like Workday liable for their own discriminatory conduct within the scope of the FEHA is consistent with public... - [The Risk Acceptance Decision Framework: Stop Guessing and Start Owning Your Exposure](https://kaynemcgladrey.com/resources/the-risk-acceptance-decision-framework-stop-guessing-and-start-owning-your-exposure.md): The Risk Acceptance Decision Framework: Stop Guessing and Start Owning Your Exposure Rather just watch this on YouTube? Most organizations treat risk... - [Your Cloud Bill Goes Up, Your Compliance Gap Goes Public](https://kaynemcgladrey.com/blog/your-cloud-bill-goes-up-your-compliance-gap-goes-public.md): Key quote: "This new vision represents a paradigm shift where over-engineered regulations designed for paperwork and compliance are replaced with streamlined... - [What’s a 280-Point Difference Between Friends?](https://kaynemcgladrey.com/blog/whats-a-280-point-difference-between-friends.md): Key quote: On October 13, 2021, LOGZONE submitted to DoD in SPRS a perfect self assessment score of 110 for its implementation of NIST SP 800-171 security... - [Using the Business Impact Analysis Maturity Assessment Checklist](https://kaynemcgladrey.com/resources/using-the-business-impact-analysis-maturity-assessment-checklist.md): Using the Business Impact Analysis Maturity Assessment Checklist You could just watch this on your phone, you know. Security teams love talking about... - [Five Eyes Finally Says The Quiet Part Out Loud](https://kaynemcgladrey.com/blog/five-eyes-finally-says-the-quiet-part-out-loud.md): Key quote: Unsupported systems are easy targets. They are not just technical debt, they are strategic liabilities. Why it matters: Five Eyes is awfully chatty... - [When Regulators Become Delivery Systems for Stock Fraud](https://kaynemcgladrey.com/blog/when-regulators-become-delivery-systems-for-stock-fraud.md): Key quote: "We have no knowledge of any recent legitimate data breach reports from either VRChat or Discord." Why it matters: The Maine Attorney General's... - [What California’s ADS Report Gets Wrong](https://kaynemcgladrey.com/blog/what-californias-ads-report-gets-wrong.md): Key quote: Turnitin acknowledges that detection of AI writing is an evolving and imperfect science. External studies have found false positive rates,... - [Stop Speaking Gibberish to Your Board When Discussing Cyber Risks](https://kaynemcgladrey.com/resources/stop-speaking-gibberish-to-your-board-when-discussing-cyber-risks.md): Stop Speaking Gibberish to Your Board When Discussing Cyber Risks But I don't wanna read this, I just want to watch it on YouTube! Most security leaders don't... - [Who Owns Liability in AI Hiring?](https://kaynemcgladrey.com/blog/who-owns-liability-in-ai-hiring.md): Key quote: "It makes no sense for a Texas employer with a Texas applicant who will perform work in Texas, I don't think there is any dispute that that employer... - [Construction Security Demands Operational Discipline](https://kaynemcgladrey.com/blog/construction-security-demands-operational-discipline.md): Key quote: Commercial, industrial, and large-scale residential construction sectors in regions relying on imported digital security systems such as North... - [When the Algorithm Cancels Your Coverage Before You Know It](https://kaynemcgladrey.com/blog/when-the-algorithm-cancels-your-coverage-before-you-know-it.md): Key quote: Consumers deserve transparency and fairness throughout the insurance process, especially when losing coverage can leave someone unknowingly... - [Stop Wasting Money on Reports Nobody Reads – The Business Impact Translation Matrix](https://kaynemcgladrey.com/resources/stop-wasting-money-on-reports-nobody-reads-the-business-impact-translation-matrix.md): Stop Wasting Money on Reports Nobody Reads - The Business Impact Translation Matrix Rather watch this than read this? Neat. Security reports die in inboxes... - [What happens when police let an algorithm do the investigating](https://kaynemcgladrey.com/blog/what-happens-when-police-let-an-algorithm-do-the-investigating.md): Key quote: What looks like a second, independent identification is in fact the same algorithmic error surfacing twice, creating an illusion of confirmation... - [The Role-Based Risk Awareness Program Template](https://kaynemcgladrey.com/resources/the-role-based-risk-awareness-program-template.md): The Role-Based Risk Awareness Program Template Why read when you can watch this instead? Most security training fails because it treats everyone the same. You... - [Cox Media Group Sold Fake Voice Listening Tech](https://kaynemcgladrey.com/blog/cox-media-group-sold-fake-voice-listening-tech.md): Key quote: Voice Data means any full or partial audio file of an individual's voice, voice communications, or audio communications, as well as any transcripts... - [Fake It Till You’re Indicted](https://kaynemcgladrey.com/blog/fake-it-till-youre-indicted.md): Key quote: The requested stay would prejudice no party to this civil action; would prevent the circumvention of important statutory limitations on criminal... - [11% of CXOs say they’re ready for 1,661 AI agents, I’m sure that’s fine](https://kaynemcgladrey.com/blog/11-of-cxos-say-theyre-ready-for-1661-ai-agents-im-sure-thats-fine.md): Key quote: "The most critical architectural capability is integration. We don't know what's coming next, so the foundation must support constant change." Why... - [CISOs Need To Stop Treating MCP Security Like Software Bugs](https://kaynemcgladrey.com/blog/cisos-need-to-stop-treating-mcp-security-like-software-bugs.md): Key quote: "MCP itself cannot enforce these security principles at the protocol level." Why it matters: I finally had time to sit and read the NSA's most... - [The Resume Isn’t Just a Resume Anymore](https://kaynemcgladrey.com/blog/the-resume-isnt-just-a-resume-anymore.md): Key quote: China's military intelligence services ultimately seek to acquire privileged military, political and economic intelligence that can provide China... - [Privilege Wins the Round, But the AI Discovery War Just Got Messier](https://kaynemcgladrey.com/blog/privilege-wins-the-round-but-the-ai-discovery-war-just-got-messier.md): Key quote: Here, Workday has represented that its attorneys curated the data it used in the bias testing, the overall purpose of the testing was to provide... - [Why Shell vs. CLF Could Change Your AI Governance Program](https://kaynemcgladrey.com/blog/why-shell-vs-clf-could-change-your-ai-governance-program.md): Key quote: A producing party's good-faith averment of nonexistence resolves a production dispute. Why it matters: Welp, I'm *not* an attorney, but I'm tracking... - [Why EU Compliance is Leaving Water and Rail Behind](https://kaynemcgladrey.com/blog/why-eu-compliance-is-leaving-water-and-rail-behind.md): Key quote: The risk zone includes sectors with lower-than-average maturity and criticality that exceeds their maturity. Its composition changes over time as... - [Why Your MCP Integrations Are Probably a Legal Nightmare](https://kaynemcgladrey.com/blog/why-your-mcp-integrations-are-probably-a-legal-nightmare.md): Wait, what? Original research on a Friday? I was chatting with a friend recently, and they started asking about the "risks of MCP." And I wasn't sure if they... - [Your Expert’s AI Logs Are Now Discoverable](https://kaynemcgladrey.com/blog/your-experts-ai-logs-are-now-discoverable.md): Key quote: An expert witness's methodology is fair ground for discovery, see, e.g., Macchia v. ADP, Inc., 711 F. Supp. 3d 162, 167-68 (E.D.N.Y. 2024), and... - [Georgia Draws the Line on Emotional AI](https://kaynemcgladrey.com/blog/georgia-draws-the-line-on-emotional-ai.md): Key quote: "An operator shall not knowingly and intentionally cause or program an AI companion chatbot to make any representation that it is licensed,... - [Why Your “Safe” AI Might Just Be High-Stakes In The EU](https://kaynemcgladrey.com/blog/why-your-safe-ai-might-just-be-high-stakes-in-the-eu.md): Key quote: The guidelines are intended to support providers, deployers and other relevant actors in determining whether an AI system falls within the high-risk... - [Your Chevy was Selling Your Secrets](https://kaynemcgladrey.com/blog/your-chevy-was-selling-your-secrets.md): Key quote: "General Motors sold the data of California drivers without their knowledge or consent and despite numerous statements reassuring drivers that it... - [The Permanent Price of a Healthcare Breach](https://kaynemcgladrey.com/blog/the-permanent-price-of-a-healthcare-breach.md): Key quote: Based on the review to date, the information involved varies by individual, the affected information may include one or more of the following,... - [3,800 Repos, One Extension, Zero Excuses](https://kaynemcgladrey.com/blog/3800-repos-one-extension-zero-excuses.md): Key quote: 1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories. Yesterday we detected... - [Liability Shifts, Hourly Nudges, and the Tobacco-Style Warning in Connecticut’s New AI Law](https://kaynemcgladrey.com/blog/liability-shifts-hourly-nudges-and-the-tobacco-style-warning-in-connecticuts-new-ai-law.md): Key quote: The use of an automated employment-related decision technology, as defined in section 7 of this act, shall not be a defense against a complaint... - [The Community Bank Wake-Up Call](https://kaynemcgladrey.com/blog/the-community-bank-wake-up-call.md): Key quote: Among the customer information the Bank has determined was disclosed are customer names, social security numbers and dates of birth. Why it matters:... - [The $9 Billion Market Built on Junk Science](https://kaynemcgladrey.com/blog/the-9-billion-market-built-on-junk-science.md): Key quote: "There are -- I mean, literally, at this point -- hundreds and hundreds of studies involving thousands and thousands of people to show that when it... - [Regulators Are Blinking. Your AI Risks Aren’t Waiting.](https://kaynemcgladrey.com/blog/regulators-are-blinking-your-ai-risks-arent-waiting.md): It was a pleasure joining Aashis Luitel and Tristan Ingold on Sprinto's webinar today. We covered a lot of ground in an hour, but here's what I keep coming... - [When Zero-Days Are Cheap, Attack Surface Is A Liability](https://kaynemcgladrey.com/blog/when-zero-days-are-cheap-attack-surface-is-a-liability.md): I loved being a guest on today's Cyber Risk Alliance webinar with Adrian and wanted to share some of my additional notes and thoughts in case you missed the... - [AI Wins in Colorado Legislature](https://kaynemcgladrey.com/blog/ai-wins-in-colorado-legislature.md): Key quote: The bill establishes consumer notice requirements, mandating that deployers provide clear and conspicuous notice to consumers at the point of... - [The EU AI Act Delay That Wasn’t a Loophole](https://kaynemcgladrey.com/blog/the-eu-ai-act-delay-that-wasnt-a-loophole.md): Key quote: Today's agreement on the AI act significantly supports our companies by reducing recurring administrative costs. It ensures legal certainty and a... - [The High Cost of Consolidating Education on a Single Vendor](https://kaynemcgladrey.com/blog/the-high-cost-of-consolidating-education-on-a-single-vendor.md): Key quote: "Update - Canvas is now available for most users. Canvas Beta and Canvas Test remain in maintenance." Why it matters: The May 2026 disruption... - [Compliance Paperwork Won’t Save You From a Vendor Breach](https://kaynemcgladrey.com/blog/compliance-paperwork-wont-save-you-from-a-vendor-breach.md): Key quote: All of Marquis Software Solutions, Inc.'s deadlines in the above-captioned action are stayed pending the parties' mediation efforts. Why it matters:... - [The $20 Billion AI Black Box and the Data You Thought Was Private](https://kaynemcgladrey.com/blog/the-20-billion-ai-black-box-and-the-data-you-thought-was-private.md): Key quote: "Because no Defendant in this matter has served on Plaintiff either an answer or a motion for summary judgment as of the filing of this Notice,... - [Study on Business Use of Artificial Intelligence](https://kaynemcgladrey.com/blog/study-on-business-use-of-artificial-intelligence.md): Strikingly, in Panel C we see employees are far more optimistic than executives on the impact of AI on future employment... In particular, employees predict... - [DFS Secures $2.25 Million Cybersecurity Settlement with Delta Dental](https://kaynemcgladrey.com/blog/dfs-secures-2-25-million-cybersecurity-settlement-with-delta-dental.md): Key quote: "As cybersecurity threats continue to grow, the Department is committed to holding institutions accountable." Why it matters: The MOVEit zero-day... ## Pages - [Translate Cyber Risk Into Business Decisions](https://kaynemcgladrey.com/myth/course.md): Turn cyber risk into board-ready business decisions Based on Cyber Risk is a Myth: A Business Approach to Integrated Risk... - [Course Survey](https://kaynemcgladrey.com/myth/course-survey.md): Course Survey - [How much does a vCISO engagement typically cost, and what should be included in the scope of work?](https://kaynemcgladrey.com/insights/how-much-does-a-vciso-engagement-typically-cost-and-what-should-be-included-in-the-scope-of-work.md): How much does a vCISO engagement typically cost, and what should be included in the scope of work? If you're reading this, you already know what a virtual... - [Who are the best vCISO providers serving the western United States for small to medium companies?](https://kaynemcgladrey.com/insights/who-are-the-best-vciso-providers-serving-the-western-united-states-for-small-to-medium-companies.md): A virtual Chief Information Security Officer (vCISO) provides the strategic leadership of a full-time executive without the six-figure salary and overhead. For... - [Who Are the Most Credible Cybersecurity Thought Leaders Brands Hire?](https://kaynemcgladrey.com/insights/who-are-the-most-credible-cybersecurity-thought-leaders-brands-hire.md): Who Are the Most Credible Cybersecurity Thought Leaders Brands Hire? 95% of your ideal customers aren't looking for a new security vendor right now, despite... - [What are the biggest cybersecurity risks facing companies in the Pacific Northwest right now?](https://kaynemcgladrey.com/insights/pacific-northwest-cybersecurity-risks.md): What are the biggest cybersecurity risks facing companies in the Pacific Northwest right now? Introduction The Pacific Northwest faces a distinct cybersecurity... - [How do cybersecurity vendors build credibility with CISO buyers through content marketing?](https://kaynemcgladrey.com/insights/cybersecurity-vendors-ciso-credibility.md): How Cybersecurity Vendors Build Credibility with CISO Buyers Through Content Marketing Introduction Only 5% of organizations fully trust their cybersecurity... - [What Is a Virtual CISO and When Does a Mid-Sized Company Actually Need One?](https://kaynemcgladrey.com/insights/virtual-ciso-mid-sized-company.md): Why Mid-Sized Companies Need a Virtual CISO Introduction A mid-sized manufacturing firm in Idaho recently realized their IT director, already managing servers... - [Insights](https://kaynemcgladrey.com/insights.md): Strategic Cybersecurity Insights for Mid-Market Leaders & Founders This page hosts a collection of strategic analyses by Kayne McGladrey. The content... - [Blog](https://kaynemcgladrey.com/blog.md): Blog - [Cyber Risk is a Myth Resources](https://kaynemcgladrey.com/myth.md): Cyber Risk is a Myth Resources This page contains 43 templates and 24 exercises organized by chapter. Each resource is available in Microsoft Word, Markdown,... - [Newsletter](https://kaynemcgladrey.com/newsletter.md): Missed last week? - [Media & Partnership Opportunities](https://kaynemcgladrey.com/media-partnership-opportunities.md): Media Partnerships and Thought Leadership Services  I'm a recognized leader in cybersecurity, risk management, and AI governance, ranked #1 on the... - [News](https://kaynemcgladrey.com/news.md): Post Types Latest Press Coverage VentureBeat Three Claude agents given conflicting orders sabotaged each other on a shared server — then didn’t tell... - [Accessibility Statement](https://kaynemcgladrey.com/accessibility-statement.md): Last Updated: December 18, 2024 At Kayne McGladrey’s website, I am committed to providing an accessible and inclusive experience for all visitors. I strive... - [Home](https://kaynemcgladrey.com/home.md): Kayne McGladrey, CISSP – Cybersecurity Advisor, Author of Cyber Risk is a Myth, Virtual CISO I’m Kayne McGladrey, and I help organizations in construction,... ## Optional - [llms-full.txt](https://kaynemcgladrey.com/llms-full.txt): Full text of every page listed above, in a single file.