Cyber Security Interviews

There are a handful of genuinely practical CISO-selling insights buried in substantial rambling, but the episode is padded with meta-commentary about the podcast's return, entrepreneurship platitudes, and a meandering Pen & Teller anecdote that adds little substance for a B2B operator.

“I talk to them. We talk to CISOs too, Doug. I was like, you talk at them. Do you talk with them? There's a big difference.”

“here the things that you need to do in this order These build on each other So they not three different steps There three steps in a row And in three to six months we going to get you here”

The CISO-selling framework has some genuinely contrarian moments - admitting failure as a retention tool, rejecting the elevator pitch entirely, calling out ambulance-chasing after breaches - but the broader entrepreneurship content is generic and the CISO insights, while experiential, won't surprise anyone who has read challenger-sale or similar literature.

“i was like yeah we fucked up we're sorry here's how we're going to do better oh that's refractory nobody ever says that”

“this dumb idea of if you were 30 seconds within an elevator with a c-stool how would you sell them i was like i fucking would it because that's the dumbest thing i've ever heard”

Douglas Brush has real practitioner credentials - built The Digital Forensic Group, claims hundreds of CISO engagements, and is doing special master work - but this is a self-interview format where the host is effectively his own guest, which limits caliber assessment, and the credential claims are largely asserted rather than demonstrated with verifiable outcomes.

“i've done 500 of these like i know i've seen every cyber security program that exists they're all the same they're underfunded understaffed”

“when i started the digital forensic group it was insane to me that when i launched the website within seconds i was seeing”

A few concrete data points appear - AdWords keyword discovery ('pc forensics'), ad budgets of $5 - 10k in the mid-90s, a 3 - 6 month program timeline - but most claims are anecdotal and no named companies, dollar-value deals, or measurable outcomes are cited, leaving the advice illustrative rather than evidence-backed.

“my advertising budget was limited it was pay up front and then wait newspapers radio yellow pages five ten thousand dollars”

“i found out there was a unused ad word that google suggested that was people had searched for but nobody else was bidding on in the marketplace pc forensics”

Dan Ayala functions more as a prompt-giver than an interviewer - questions are broad and leading, there is no meaningful pushback, no data challenged, and the episode ends in a prolonged confused sign-off; the format is essentially an unguided monologue dressed as a conversation.

“Do you want to talk about the two projects that you and I are working on together”

“Let's talk a little bit about CISOs and selling to CISOs.”