In this episode, the host welcomes Nett Lynch, Chief Information Security Officer at Kraft Kennedy, for a conversation about human-centered cybersecurity. Nett traces her path from ten years in technical IT roles through founding an MSP, where an early misstep with a nursery and landscaping client taught her the lesson that has shaped her career since: technical recommendations only land when they are translated into business outcomes. That realization, paired with an MBA, pushed her toward blending emotional intelligence with business acumen, the combination she now credits as the real differentiator for any technology advisor.
She shares the story of a reluctant first compliance engagement with a law enforcement client that was failing its CJIS (Criminal Justice Information Systems) attestation. By treating the review like a standard IT discovery and presenting the security gaps in plain business terms, including dormant accounts still held by former IT staff, she won the council's approval on the spot, over an incumbent vendor who proposed no changes at all. The experience convinced her that compliance, handled well, is not a checkbox exercise but a genuine opportunity to raise an organization's security posture.
On current priorities, Nett walks through why she considers passwordless authentication the single highest impact change an organization can make, how building a genuine culture of security (constant, top-down communication rather than an annual training) is what actually changes behavior, and why she is already preparing clients for “Q Day,” the point at which quantum computing will be able to break today's encryption, including passwords, in seconds. She also discusses why more law firms of every size are pursuing SOC 2 or ISO certifications to satisfy client security questionnaires and win larger clients, and why business owners should never assume their IT provider is covering every gap without independent validation.
Throughout, Nett returns to the same theme: the human element, understanding a client's motivations, fears, and business goals, is what turns a technical recommendation into a decision people actually act on.
