Defense in Depth How to Be Less Busy and More Effective in Cyber
9 snips
Apr 2, 2026 Dan Walsh, CISO at Datavant — security operator focused on program effectiveness and burnout prevention. Ross Young, CISO Tradecraft co-host and author — analyst of wasted budgets and outcomes. They explore activity vs advancement, attention fragmentation and meeting waste, tuning metrics for real outcomes, protecting boundaries to prevent burnout, and using frameworks as tools rather than checklists.
AI Snips
Chapters
Books
Transcript
Episode notes
Busyness Masks Outcome Focus
- Busy work often masks focus on activities instead of outcomes.
- Ross Young reframed busyness as an ATT&CK-style pattern that degrades effectiveness by filling calendars with low-value tasks.
Only Invite Decision Makers To Meetings
- Cut meeting waste by scoping attendees and requiring agendas tied to outcomes.
- Ross recommends only inviting presenters plus a few decision makers and demanding stated meeting outcomes before accepting invites.
Measure Maturity Before Cutting Tasks
- Evaluate busy signals relative to organizational maturity before labeling them waste.
- Dan Walsh uses the SOC example: old metrics can become irrelevant as functions mature and create the illusion of productive activity.
