Dave DeWalt, founder and CEO of NightDragon, on how to get a board to buy in on cybersecurity

Value of the Information & Strength of the Argument

The interview provides valuable, practical advice from a seasoned expert, offering concrete metrics (response time, recovery time) and governance structures (ERM dashboards, board committees) that boards can use. DeWalt’s argumentation is persuasive, drawing on his extensive experience and specific examples like the CrowdStrike outage and Volt Typhoon. He effectively makes the case that cybersecurity is a board-level risk that requires more attention and expertise. The discussion is well-structured, moving from the problem (lack of board focus) to solutions (metrics, education, exercises).

Scientific Rigor, Source Quality, Title Accuracy

The interview is based on DeWalt’s personal experience and observations, which lends credibility but lacks formal citations. He references specific threats (Volt Typhoon) and regulations (SEC, SOX) but does not provide detailed sources. The title accurately reflects the content. The election security segment is a news discussion with potential bias, but it is clearly separated from the interview. The overall rigor is moderate, with a reliance on anecdotal evidence rather than empirical data.

The title accurately reflects the main interview content, focusing on how to get board buy-in for cybersecurity.

7/10

The interview features an experienced cybersecurity executive with 25 years in the field, providing practical insights on board-level cybersecurity governance. The discussion is grounded in real-world experience and references specific threats (Volt Typhoon) and regulations (SEC, SOX). However, the content is largely anecdotal and lacks rigorous data or citations, and the election security segment is a news discussion with potential bias.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 01:00Introduction to the episode and election security segment.
• 02:00Discussion on President Trump's proposal to ban mail-in voting and electronic voting machines.
• 05:00Derek Johnson explains the constitutional limitations on federal election authority.
• 10:00Interview with Dave DeWalt begins; he discusses his background and board roles.
• 12:00DeWalt highlights that boards spend less than one hour per year on cyber and less than 5% have cyber experts.
• 15:00Discussion on metrics: response time and resilience as key KPIs.
• 20:00DeWalt advocates for board involvement in tabletop exercises and increased cyber education.
• 25:00Discussion on regulatory considerations and the energy sector's cybersecurity challenges.

• CyberScoop article on this interview — The article likely provides additional context and a transcript of the interview.
• Safe Mode show page — The show's page provides information about the podcast and episodes.
• CyberScoop on LinkedIn — CyberScoop's LinkedIn page for following updates.
• CyberScoop on Bluesky — CyberScoop's Bluesky profile for social media updates.

• NIST Cybersecurity Framework — Supports the need for standardized cyber risk management.
• SEC Cybersecurity Disclosure Rules — Aligns with the discussion on regulatory considerations.

• Election security claims — The election security segment discusses claims of voter fraud that have been widely debunked; the segment itself notes the lack of evidence.