Member Contribution • Weekly CISO Podcast Pick
This Week’s Pick by David B. Cross (CISO, Atlassian)
Series curated by the CISO Platform community. Spotlighting practical listens for security leaders and their teams.
Why this matters to CISOs
|
Copy-paste takeaways for your team
|
Standout ideas from the keynote
- Stop asking for perfect numbers. They do not exist in cyber security.
- Threat modeling beats risk modeling. Focus on what can go wrong and how.
- Use engineering bars. Bug bars and exploitability thresholds outperform risk matrices.
- Language shapes outcomes. Replace “risk” with hazards, failures and controls.
Try these in the next 7 days
- Board narrative review: Replace heat maps with concrete failure scenarios.
- Prioritization reset: Identify fixes blocked by “risk debate.”
- Bug bar audit: Define non-negotiable security thresholds.
- Exec alignment: Frame security decisions as trade-offs, not probabilities.
- Language shift: Stop using likelihood where evidence is weak.
About David B. Cross
David B. Cross is Chief Information Security Officer at Atlassian. Before Atlassian he held senior security leadership roles at Microsoft, Google and Oracle and began his career in US Navy aviation and electronic warfare. His work focuses on building engineering centric security programs, scaling security operations and helping the next generation of practitioners build meaningful careers.
Want your pick featured next?We are building a rotating slate of member recommendations from USA, Middle East and India. If you are a CISO or security leader, submit a link and 3 bullets on why it matters for other security teams. |
How we choose
|
Comments