Take your security leadership, board reporting, and emerging technology governance to the next level with pragmatic wisdom from a veteran who spent 22 years in military Explosive Ordnance Disposal (EOD) before leading global technology and cyber resilience for Fortune 500 enterprises. It’s time to stop chasing every shiny headline and start building an adaptable operational foundation that absorbs modern technological disruption. Who better to guide you through this transition than former Aflac Global CISO & CIO, NTSC Co-Founder, and 2026 Technology Association of Georgia Board Chair, Tim Callahan?
You will learn why standing up standalone AI committees creates unnecessary administrative sprawl, how to manage the friction between CIO and CISO priorities by separating budgets and reporting structures, and why mastering the fundamentals of access control protects you against AI threats just as it did with early PDAs and virtual servers. Get motivated to cut down board slide decks, invest in internal talent succession, and master the discipline of knowing where an “A+” is required and where “good enough” provides optimal business defense!
Takeaways:
The “Great at Being Good Enough” Philosophy: In an environment of finite budgets, security leaders must distinguish between operational controls that require an A+ (preventing and responding to attacks) versus areas where baseline compliance (a “C”) is completely sufficient.
Absorb Innovation Through Existing Governance: Rather than creating ad hoc committees for every new trend, Aflac scaled AI governance by expanding the mandate of its existing Data Protection and Privacy Subcommittee.
Access Control as the Universal Anchor: Whether defending against Trojan horses, securing 2000s-era mobile devices, or permissioning autonomous AI agents, foundational access control (”deny all except as permitted”) remains the primary security barrier.
Separating Security from the IT Chain: True operational independence requires separating security budgets and reporting lines from IT operations - ideally routing CISO reporting to a General Counsel or Chief Risk Officer.
Board Communication Through Conversation: Successful board briefings rely on executive brevity and high-level conversational engagement; bury dense regulatory checklists in the appendix and never get bogged down in technical metric weeds.
Quote of the Show:
“One thing that I’ve learned in life is you’ve got to be really great at being good enough... It’s not a call to mediocracy. It’s a call to know what you have to have an A+ in and where a C is just fine.” - Tim Callahan
Links:
Website: http://www.ntsc.org
Ways to Tune In:
Apple Podcasts: https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297
