The Defender's Advantage - Ross Young - Channel Security Secrets - Episode #035
Lou Rabon sits down with Ross Young, CEO of Clear Capabilities and co-host of the CISO Tradecraft Podcast, a former CIA and NSA cybersecurity leader who has also worked at the Federal Reserve Board, Capital One, and Caterpillar Financial, and the creator of the OWASP Threat and Safeguard Matrix. Ross just released a book called "Cybersecurity's Dirty Secret: Why Most Budgets Go to Waste" and he brings a refreshingly practical, dollar-focused take on what it actually means to run a security program well.
From the developer driver's license concept to AI agents replacing manual security response, this conversation is packed with frameworks channel sellers and security leaders can put to work immediately.
Takeaways
- Curiosity is the number one trait that separates great cybersecurity professionals from average ones. Ross compares it to Kobe Bryant practicing three times a day while others practice once.
- For channel sellers who are not deeply technical, the entry point is simpler than they think. Books, podcasts, and a $20 Udemy course can give you enough to ask the right questions.
- Vulnerability management is now the top attack vector according to the Verizon Data Breach Report, and organizations need to shift from patching in 30 or 60 days to patching in hours.
- The developer driver's license is a concept from Ross's book. Just like a 16 year old needs to pass a written test, complete supervised driving hours, and then pass a road exam before getting a license, developers should have to complete training before being granted access to push code to production.
- AI agents will become as standard in the workplace as PowerPoint, Word, and Excel. Ross believes that by 2028, knowing how to build an agent will be a baseline skill for every job, not just technical roles.
- Partnering with a strategic reseller at a flat fee model rather than a per-tool markup across 50 vendors can save a CISO millions of dollars annually.
Quote of the Show
- “I think in 2028, everybody needs to know how to build an agent." - Ross Young
Find all episodes, show notes, and resources at: https://www.cdg.io/podcast/
Partner with us: https://www.cdg.io/partner-with-cyber-defense-group/
