In this episode of CISO Tradecraft, host G. Mark Hardy discusses seven critical issues facing the cybersecurity industry, offering a detailed analysis of each problem along with counterarguments. The concerns range from the lack of a unified cybersecurity license, the inefficiency and resource waste caused by auditors, to the need for a federal data privacy law. Hardy emphasizes the importance of evaluating policies, prioritizing effective controls, and examining current industry practices. He challenges the audience to think about solutions and encourages sharing opinions and additional concerns, aiming to foster a deeper understanding and improvement within the field of cybersecurity. Transcripts: https://docs.google.com/document/d/1H_kTbCG8n5f_d1ZHNr1QxsXf82xb08cG Chapters 00:00 Introduction 01:28 Introducing the Seven Broken Things in Cybersecurity 02:00 1. The Lack of a Unified Cybersecurity License 06:53 2. The Problem with Cybersecurity Auditors 10:09 3. The Issue with Treating All Controls as High Priority 14:12 4. The Obsession with New Cybersecurity Tools 19:23 5. Misplaced Accountability in Cybersecurity 22:38 6. Rethinking Degree Requirements for Cybersecurity Jobs 26:49 7. The Need for Federal Data Privacy Laws 30:53 Closing Thoughts and Call to Action