In Episode 114 of the Cybersecurity Readiness Podcast Series, Dr. Dave Chatterjee is joined by Mark Lance, Senior Vice President of Digital Forensics, Incident Response, and Threat Intelligence at GuidePoint Security, to examine what a more organized, better-resourced ransomware adversary means for organizational preparedness. Dr. Chatterjee opens with a striking data point: roughly 69 ransomware groups were active in a given quarter in early 2025, but by the second quarter of 2026 that number h

Every organization eventually discovers a gap between what feels like good security practice and what regulators now expect. In this episode, Mark Lambert and I dig into that gap through the lens of the EU's new Cyber Resilience Act — a sweeping regulation that is reshaping how companies everywhere think about vulnerability disclosure, product security, and accountability. Beyond the regulatory details, this conversation is really about a broader theme: the difference between reacting to a cr

In Episode 112 of the Cybersecurity Readiness Podcast Series, Dr. Dave Chatterjee is joined by Dr. Mark Yoffe, a board-certified internal medicine physician who has also built deep expertise in cybersecurity, to examine a question most healthcare organizations have not fully reckoned with: what actually happens to patient care when the electronic health record goes dark. The conversation moves through the compensatory mechanisms hospitals fall back on — written charts, physical examination, and

In Episode 111 of the Cybersecurity Readiness Podcast Series, Dr. Dave Chatterjee is joined by Bruno Lecoq, CEO of BEMO, to examine the gap between executive intention and operational security reality in small and medium-sized organizations, and what it costs when resource trade-offs, unclear ownership, and optimism bias quietly undermine programs that look sound on paper. Drawing on his nearly sixteen years at BEMO and twenty years at Microsoft before that, working with companies of 10 to 1,

In Episode 110 of the Cybersecurity Readiness Podcast Series, Dr. Dave Chatterjee is joined by Dr. Varin Khera, Co-Founder and Chief Technology Officer of SecStrike and Head of Asia Pacific at Yarix, to examine how frontier AI models have shifted the offense-defense balance in cybersecurity, and why the annual or semi-annual penetration test — long treated as a reliable baseline control — can no longer keep pace with adversaries who reason adaptively, chain misconfigurations across dozens of sys

In Episode 109 of the Cybersecurity Readiness Podcast Series, Dr. Dave Chatterjee is joined by Joshua Weinick, AI Automation Engineer at Blink Ops, to examine a question every security leader is now facing: what happens when the volume, velocity, and variety of cyber threats exceed what any human-staffed security operations center (SOC) can handle, and what role do humans play in a security function that increasingly depends on AI agents executing at machine speed. Analyzed through Dr. Chatterje