AI Summary
5 min readFor a CISO with twenty years in the field, the scariest threat is not a zero-day exploit or an advanced persistent state actor. It is the webcam a well-meaning employee plugged into the network to watch for the pizza delivery driver. That is shadow IT—unapproved technology deployed without security review—and Dr. Gerald Auger, who holds a PhD in cyber operations and serves as CISO at Threat Gen, calls it his single biggest concern. “You are deciding the risk posture for the organization that I'm being charged to protect,” he says, by sticking that device on the network. And because most remote access tools run over port 443, they hide inside normal web traffic, invisible to the security team until something goes wrong.
Why Security Awareness Fails—and What Replaces It
The annual PowerPoint compliance training is the enemy of effective security culture. Auger is blunt: “That annual PowerPoint or the annual kickoff or something like that is never going to change behavior. It's never gonna modify culture.” Employees take that training alongside workplace slip-and-fall modules. It is a checkbox, not a behavior modifier.
Continue reading the full summary in the app — free to try.
Read Full Summary →Free • No credit card required
Never miss an episode of Cyber Crime Junkies
Get every new episode summarized in your inbox — free, ~5 minutes to read.
No spam. Unsubscribe anytime.
What you'll learn
- 1 (05:00) **Welcome and Guest Introduction** - Host David Morrow and co-host Mark Mojard introduce Dr. Gerald Auger, a CISO, educator, and founder of Simply Cyber.
- 2 (10:00) **The Morning Threat Briefing Origin** - Auger explains how his daily live stream started as a personal ritual and grew into a community resource.
- 3 (14:00) **Effective Security Awareness Training** - The conversation shifts to what actually changes employee behavior versus checking a compliance box.
- 4 (17:50) **Why It Matters vs. Scaring People** - David describes his own training approach, and Auger validates the focus on personal relevance over fear.
- 5 (22:42) **Tabletop Exercises: The Right Way** - The discussion pivots to tabletop exercises, why most fail, and how to make them effective.
- 6 (25:10) **The Compliance vs. Security Trap** - Auger identifies a common organizational mindset that hinders real security progress.
- 7 (27:30) **Cyber Insurance as a Driver** - The conversation covers how insurance companies are now setting baseline security standards for many organizations.
+ Full timestamped outline available in the app
Show Notes
Ever wonder why there is so much information, news and stories about cybersecurity and cybercrime in the media these days? Historically the things that made news, were all about brands and the stories of those brands. In the same sense, Cyber security is about brand protection and the stories those involve. Cybercrime is at record levels, and most agree it takes a collaboration between both the public and private sector to really address all of the complex aspects that are needed for people and organizations to protect their brands. Because of the complexity of security, it is difficult for organizations to hire the talent needed, the skill sets, and the right culture fit. Cyberseek.org has an excellent heat map that shows the hundreds of thousands of open jobs available today in the US alone in Cybersecurity. But changing careers and advancing into cyber can be daunting for many.
What role do you ultimately want in security? Offensive die, defensive? Consulting, GRC, investigative marketing, sales etc.. It’s a wide range.
This episode gives an exclusive and rare chance to go inside on of the world-renowned leaders in cyber career paths.
Dr Gerald Auger holds a PHD in security, is a well-known CISO, exclusive and rare inside opportunity to speak candidly with one of the international leaders known around the world for helping individuals. break into cyber.
Director of Education at ThreatGen and founder of Simply Cyber i.o. He hosts a daily livestream reviewing tech news and offers a complete and innovative masterclass for GRC. Enjoy the show! You can find more here:
True crime enters our homes and businesses daily. Learn from actual people who fight it daily and show you how in a thriller story. The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.
Special Author pricing (30% off)
The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.
Special Author pricing (30% off)
Growth without Interruption. Get peace of mind. Stay Competitive-Get NetGain. Contact NetGain today at 844-777-6278 or reach out at [email protected] or find more at www.NETGAINIT.com
Want to Watch?
Subscribe and stop reading about it after it happens:
More from this podcast
Cyber Crime Junkies →