Minimum Viable Company as Security’s Inflection Point & Human Breaking Point Collide

In this episode, Kriss Stephen, Principal Solutions Architect at Semperis, explores the concept of the Minimum Viable Company and the three foundational capabilities every organization needs to withstand and recover from a cyberattack. Drawing from his experience in identity security and cyber resilience, Kriss shares practical lessons on how organizations can prioritize recovery, protect critical identity systems, and maintain business operations during disruptive incidents. Listeners will gain actionable insights into building resilience before a breach occurs and accelerating recovery when it matters most. This segment is sponsored by Semperis. Visit https://securityweekly.com/semperis to learn more about them! In the leadership and communications segment, Crisis Communication for Boards handbook, Unclear AI risk ownership could leave CISOs in familiar scapegoat role, Optimism Is Now an Essential Leadership Skill, and more! Kriss Stephen is a Principal Solutions Architect at Semperis, specializing in identity security, cyber resilience, and the protection of critical Active Directory and Entra ID environments. With deep expertise in Active Directory Forest Recovery (ADFR) and Directory Services Protector (DSP), he helps organizations prepare for, respond to, and recover from identity-focused cyberattacks. Kriss works closely with customers on recovery planning, identity infrastructure protection, post-recovery validation, and security automation, including Azure and Entra SAML integrations. He also contributes to technical guidance, operational best practices, and thought leadership focused on cyber resilience and lessons learned from real-world breaches. Through his work, Kriss helps security teams strengthen their defenses against today’s most disruptive identity-based threats. Digital transformation made your business faster. It also made your network exponentially more complex. Remote work, cloud, SaaS, AI, third parties... every new connection expands your attack surface. The challenge isn't buying another security product. It's building a network security strategy that supports the business without increasing risk. Join us for the Network Security Virtual Summit on October 28 to hear how security leaders are modernizing network defenses while enabling growth. Security Weekly listeners get a free pass! Register now at https://securityweekly.com/netsec using the discount code CSS26-SW! Matt Alderman - Crisis Communication for Boards handbook The Chartered Institute of Public Relations’ (CIPR) Crisis Communications Network and the Institute of Directors (IoD) have published a Crisis Communication for Boards handbook. It advises on the ‘five phases’ of a crisis – how to predict, protect, prepare, respond, and recover; and build resilience. - The Human Breaking Point: A Reality Check on the 2026 State of Cybersecurity We’ve spent years treating the “cybersecurity talent gap” like a math problem. The logic was simple: if we just churned out more degrees and threw more money at salaries, the problem would go away. But if you look at ISACA’s new 2026 State of Cybersecurity report, it’s clear we aren't just facing a numbers problem. We’re facing a human one. - Cybersecurity’s Strategic Inflection Point: A Senior Leadership Agenda for 2027 Cybersecurity has become a condition of economic resilience, yet governance, investment and measurement practices have not kept pace. The World Economic Forum’s Cybersecurity’s Strategic Inflection Point: A Senior Leadership Agenda for 2027, produced by the Global Future Council on Cybersecurity, outlines a senior leadership agenda for closing that gap. - Unclear AI risk ownership could leave CISOs in familiar scapegoat role With no consensus on who owns AI risk, cybersecurity leaders could be exposed. Experts say CISOs need authority over AI security -- not just accountability when it goes wrong. - Optimism Is Now an Essential Leadership Skill Optimism isn’t about ignoring problems or pretending everything will work out. It’s about acknowledging challenges while believing that your actions can still make a difference. Psychologist and researcher Michelle Gielan shares research linking optimism to higher productivity, sales, engagement, and lower burnout. - Why Are Good Communications skill necessary? Good communication skills are essential in every workplace because they promote understanding, strengthen professional relationships, and help organizations achieve their goals. Whether during meetings, job interviews, or everyday interactions, effective communication enables employees and managers to exchange information clearly and work together productively. This article examines three important reasons communication skills are necessary in the workplace.