CyberWins Episode 10: Stephen Podobinski – The BISO: The Most Important Role Nobody Talks About

What if the most valuable person in your security team isn't a hacker, an analyst, or a CISO but a translator? In this episode, host Mark Voorhies sits down with Stephen Podobinski, a 10-year information security veteran, former attorney, and specialist in the BISO (BUSINESS INFORMATION SECURITY OFFICER) role the critical but often overlooked function that sits at the INTERSECTION OF TECHNOLOGY, SECURITY, AND BUSINESS. Stephen's journey started at TARGET DURING THE 2012 BREACH one of the most significant cybersecurity events in retail history. As a peripheral actor in a response involving HUNDREDS OF PEOPLE across technology, security, legal, and public affairs, he learned the lesson that has defined his career: IN A CRISIS, ASK YOURSELF WHAT ONE TO THREE THINGS YOU CAN DO TODAY TO MOVE THE NEEDLE. Every day. Without exception. His standout framework: QUALITY x ADOPTION = VALUE. A perfect MFA solution with zero adoption delivers ZERO VALUE to the organization. A simpler solution that everyone actually uses? That's your real security win. It sounds obvious. Most organizations get it completely wrong. Chapters: 0:00 – Intro: Meet Stephen Podobinski 1:00 – From Attorney to InfoSec: The Target Breach Origin Story 3:00 – What It Was Like Inside the 2012 Target Breach Response 5:00 – The Crisis Mindset: One to Three Things You Can Do Today 7:00 – The Contractual Win: Shifting Who Reviews Incoming Technology 9:00 – The BISO Role: The Translation Layer Between Security and Business 11:00 – The Data Plumber Philosophy: Follow the Data, Fix the Pipes 14:00 – Working Yourself to a Steady State, Not Out of a Job 16:00 – The Relationship Matrix: Managing Dozens of Stakeholders Effectively 19:00 – The Sales Component of the BISO Function 21:00 – Quality x Adoption = Value: The Most Overlooked Security Framework 24:00 – The UB Key Rollout: What Happens When Adoption Is an Afterthought 26:00 – Final Takeaway: If It Doesn't Get Used, It Doesn't Count #CyberSecurity #BISO #RiskManagement #CyberWins #InfoSec #SecurityLeadership #TargetBreach #DataSecurity #BusinessSecurity #changemanagement Join the CyberWins community on LinkedIn:   / cyberwins-usa