Minimum Viable Company as Security’s Inflection Point & Human Breaking Point Collide - BSW #470

In this episode, Kriss Stephen, Principal Solutions Architect at Semperis, explores the concept of the Minimum Viable Company and the three foundational capabilities every organization needs to withstand and recover from a cyberattack. Drawing from his experience in identity security and cyber resilience, Kriss shares practical lessons on how organizations can prioritize recovery, protect critical identity systems, and maintain business operations during disruptive incidents. Listeners will gain actionable insights into building resilience before a breach occurs and accelerating recovery when it matters most. This segment is sponsored by Semperis. Visit https://securityweekly.com/semperis to learn more about them! In the leadership and communications segment, Crisis Communication for Boards handbook, Unclear AI risk ownership could leave CISOs in familiar scapegoat role, Optimism Is Now an Essential Leadership Skill, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-470 00:00:00 Episode 470 Intro, Host Greetings, and Weekend Football 00:03:23 Active Directory: The 26-Year-Old Foundation of MVC 00:07:35 Managing Legacy AD Complexity Against New AI Threats 00:13:15 Understanding and Prioritizing Active Directory Recovery: Test Your Plan 00:19:53 Designing Uncomfortable Tabletop Exercises for Board Crisis Scenarios 00:26:48 Prioritizing Trustworthiness Over Speed in Active Directory Recovery 00:34:34 Crisis Communication Handbook for Boards: Preparing for Disruptions 00:38:59 The Human Breaking Point: Job Stress and Burnout in Cybersecurity 00:43:30 World Economic Forum: Cybersecurity's Strategic Inflection Point 00:50:02 Unclear AI Risk Ownership: CISO's Potential Scapegoat Role 00:51:08 Why Optimism is Now an Essential Leadership Skill for Engagement 00:54:35 The Importance of Good Communication Skills in the Workplace