The Brief on Cybersecurity, Compliance, Risk, AI

In this episode of The Brief, Charles Denyer continues his 8-part CMMC series with Step 4: CUI Storage — where Controlled Unclassified Information lives at rest in your environment, and why this is where compliance scope explodes most unexpectedly. Building on the processing framework from Episode 28, Charles explains that CUI does not disappear once work is finished. It persists — in primary repo...

In this episode of The Brief, Charles Denyer continues his 8-part CMMC series with Step 3: CUI Processing and Transformation — what actually happens to Controlled Unclassified Information after it enters your environment, and why this is where risk concentrates and assessors probe hardest. Building on the ingestion framework established in Episode 27, Charles explains that CUI rarely stays static...

In this episode of The Brief, Charles Denyer continues his 8-part CMMC series by breaking down Step 2: CUI Ingestion—how Controlled Unclassified Information actually enters your environment and why this is where most organizations lose control of their compliance scope. Building on the foundation established in Episode 26, Charles explains that defining CUI is only the beginning. The real challeng...

In this episode of The Brief, Charles Denyer shifts from foundational concepts to real-world execution by breaking down the most critical step in any CMMC program: defining and identifying Controlled Unclassified Information (CUI) with precision and authority. Drawing directly from his CUI Definition Workbook, Charles walks through a structured, contract-driven methodology for determining what act...

In this episode of The Brief, Charles Denyer takes a deep dive into one of the most critical—and most consistently misunderstood—foundations of CMMC compliance: the relationship between Controlled Unclassified Information (CUI) and your true audit scope. Most defense contractors believe they understand where their CUI resides and how it’s controlled. But when that assumption is tested under real a...

In this episode of The Brief, Charles Denyer breaks down Controlled Unclassified Information (CUI)—one of the most critical and misunderstood requirements facing today’s defense contractors. Using real-world examples from machining firms, aerospace suppliers, and IT service providers, Denyer explains how CUI actually shows up in everyday operations and why many organizations are handling it withou...

In this episode of The Brief, Charles Denyer explores why most information security policies fail—not because organizations lack documentation, but because that documentation becomes static, outdated, and disconnected from reality. What starts as a structured, well-intentioned effort—complete with approved policies across access control, incident response, and vendor risk—often fades into irreleva...

In episode 22 of The Brief with Charles Denyer, we tackle one of the most misunderstood — and dangerous — gaps in cybersecurity and compliance: the difference between policies and procedures. Charles exposes why so many companies think they’re secure because they have documentation — when in reality, most of it is just “shelfware.” He breaks down how policies define the what, while procedures defi...

In episode 21 of The Brief with Charles Denyer, we uncover the hidden truth behind most security failures — not weak firewalls or fancy zero-days, but neglected policies and forgotten procedures. Charles takes you inside the boardrooms and breach investigations where “policy shelfware” — beautifully written, rarely followed — has cost companies millions in damages and trust. Through riveting story...

Every year, companies spend billions on security awareness training — yet the breaches keep coming. Why? Because most of it doesn’t work. In The Brief with Charles Denyer, Episode 20: “The Great Security Awareness Training Scam: How a Billion-Dollar Industry Is Failing to Protect You,” Charles exposes the truth behind the glossy videos, generic PowerPoints, and annual compliance courses that give...

Pen Testing Is a Lie: Why Most Tests Are Fluff and What Really Matters in the Cloud | EP 19 Podcast Episode Description: Every company says they’ve done a pen test — but what if most of them mean absolutely nothing: In The Brief with Charles Denyer, Episode 19: “Pen Testing Is a Lie: Why Most Tests Are Fluff and What Really Matters in the Cloud,” Charles exposes one of cybersecurity’s biggest dece...

When a cyberattack hits, it’s not your technology that saves you — it’s your plan. In The Brief with Charles Denyer, Episode 18: “Building a Real-World Incident Response Program for Security & Compliance,” Charles takes listeners inside the chaos of a real breach to reveal how organizations can transform panic into precision. From the first 30 minutes of a security incident to the final audit...

In the modern workplace, the greatest cybersecurity threat isn’t lurking in some distant data center — it’s sitting right on your desk. In this episode of The Brief with Charles Denyer, Episode 17: “Lock It Down: How to Secure Employee Endpoints,” Charles unpacks the hidden vulnerabilities behind every laptop, phone, and tablet that touches company data. From the rise of remote work to the explosi...

In episode 16 of The Brief, Charles Denyer delves into one of the most underestimated yet dangerous security threats facing organizations today: rogue USB drives and unauthorized external storage devices. Starting with the haunting story of the 2008 Agent.btz breach, where a single USB drive infected U.S. military networks with devastating consequences, Charles explores how these tiny, everyday to...

In this powerful episode of The Brief, host Charles Denyer breaks down the modern realities of managing a distributed workforce — and the hidden cybersecurity threats that come with it. How to Build a Remote Work Policy That Actually Works goes beyond productivity tips and virtual meeting etiquette to reveal why most organizations are one weak password or unsecured Wi-Fi connection away from disas...

In this gripping episode of The Brief, host Charles Denyer exposes the terrifying new frontier of digital deception — where artificial intelligence has turned social engineering into a precision weapon. Phishing 2.0: How Social Engineering Is Evolving with AI takes listeners inside the next generation of cyberattacks, where AI clones voices, mimics emails, and manipulates human behavior with chill...

In this chilling episode of The Brief, host Charles Denyer exposes the dark underworld of modern ransomware — a billion-dollar global industry run by organized crime syndicates, state-sponsored hackers, and digital mercenaries. The Ransomware Reckoning: How Cybercriminals Are Winning — and What You Can Do About It pulls back the curtain on how these attacks really work, revealing the secrets most...

In Episode 11 of The Brief, Charles Denyer explores one of the most pressing and persistent cybersecurity challenges today: managing remote workforces. As remote work becomes the new normal, the security risks that come with distributed teams—especially third-party contractors and non-company developers, are growing fast. From shadow IT to weak access controls, Charles walks you through the real-w...

In Episode 12 of The Brief, Charles Denyer takes a hard look at the one risk that’s been here since the dawn of cybersecurity—and is still the biggest threat today: human behavior. From phishing emails to accidental data leaks, credential sharing to rogue insiders, the truth is clear: your tech stack may be bulletproof, but your people? Not so much. In this episode, Charles breaks down how attacke...

In Episode 10 of The Brief, Charles Denyer challenges the outdated model of annual compliance audits and introduces the transformative power of continuous compliance. With the rapid evolution of cyber threats and regulatory landscapes, relying on periodic checks is no longer sufficient. Continuous compliance, powered by modern Governance, Risk, and Compliance (GRC) tools like Drata, Vanta, and Sec...

In this episode of The Brief, Charles Denyer dives into a growing security concern: unapproved file sharing tools. Tools like Dropbox, Box, Egnyte—while excellent for personal use and even for collaboration—are increasingly being used by employees to share sensitive company data, often without IT's knowledge or approval. Charles explores the risks these tools pose to your organization's se...

In this episode of The Brief, Charles Denyer dives into one of the most pressing and often overlooked threats facing organizations today: third-party risk. As businesses increasingly rely on external vendors, suppliers, and contractors, the potential threats they introduce are more significant than ever. From supply chain attacks to vulnerabilities introduced by outsourced IT support, the dangers...

In this episode of The Brief, Charles Denyer dives into one of the most pressing and often overlooked threats facing organizations today: third-party risk. As businesses increasingly rely on external vendors, suppliers, and contractors, the potential threats they introduce are more significant than ever. From supply chain attacks to vulnerabilities introduced by outsourced IT support, the dangers...

In Episode 06 of The Brief, Charles Denyer uncovers a growing cybersecurity reality—silent assessments. These unannounced evaluations of your digital infrastructure are often initiated by customers or partners trying to independently verify your security posture. Without notice or permission, they’re scanning your systems, looking for weaknesses, and drawing conclusions—sometimes before you even k...

In Episode 05 of The Brief with Charles Denyer, Charles explores a critical, yet often overlooked, compliance risk: Shadow Compliance. This episode delves into the dark side of GRC (Governance, Risk, and Compliance) programs where non-compliant systems, processes, and teams are operating just outside the radar of your formal compliance efforts. Charles exposes the dangers of blind spots in your GR...