Gaining the Technology Leadership Edge · 2026-03-18 · 23 min
Many organizations assume they’re under-secured - but Grant McCracken argues the opposite: most companies are overspending on the wrong things. In this episode, Grant explains how “security theater” drives waste across the cybersecurity industry, where teams focus on compliance checkboxes instead of real protection. He also breaks down why traditional penetration testing remains slow, expensive, and inefficient, often involving layers of consultants and inflated costs. Grant shares how automation and platform-based approaches can dramatically reduce cost and speed up vulnerability discovery, while making proactive security more accessible to organizations that typically can’t afford it. The conversation explores how legacy security practices persist simply because “that’s the way it’s always been done” - and why leaders should rethink how they approach proactive defense. Key points: Many organizations engage in “security theater,” performing compliance activities that appear secure but don’t necessarily improve real security outcomes. Compliance frameworks like SOC 2 or PCI can help - but only when implemented in the spirit they were intended, not as a checkbox exercise.
Why Silence in Meetings Is Your Biggest Warning Sign52 / 100The Real Bottleneck Behind Delayed Software TeamsThe CTO Bottleneck: Why Great Teams Still Wait for PermissionStop Escalating. Start Engineering SolutionsEscape the Firefighter CTO Trap: Stop Being the Approval Layer