Cyber Compliance & Beyond

Welcome to "Cyber Compliance and Beyond," a Kratos podcast that will bring clarity to compliance, helping put you in control of cybersecurity compliance in your organization. Kratos is a leading cybersecurity compliance advisory and assessment organization, providing services to both government and commercial clients across varying sectors including defense, space, satellite, financial services, and health care. Through "Cyber Compliance and Beyond," our cyber team of experts will share their insights on the latest compliance issues. We want to hear from you! What unanswered question would you like us to tackle? Is there a topic you'd like us to discuss? Or do you just have some feedback for us? Let us know on Linked and Twitter at Kratos Defense or by email at ccbeyond@kratosdefense.com.

Cyber Compliance & Beyond is a technology podcast hosted by Kratos, with 33 episodes on record and a Required Pod Score of 80.

Kratos hosts Cyber Compliance & Beyond, a technology show with 33 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #33

  33 - Minutes to Exploit: AI and the Modern Threat Landscape

  Sep 15, 202653 minS1

  As AI is reshaping the threat landscape, the timeline for vulnerability discovery has collapsed. In this episode, guest Matt Stern breaks down how attackers are using AI to find and exploit weaknesses in minutes, and what organizations must do to keep pace. We explore how modern AI‑driven testing can scan code, APIs, and mobile apps at scale, surface logic flaws traditional tools miss and help teams secure software before release. Matt also explains how continuous AI‑powered pen testing reduces blind spots, cuts alert noise, and allows humans to focus on advanced threats. Finally, we look at the next frontier of agentic AI — guardrails, documentation checks, and automated reviews that help organizations prepare for a world where both attackers and defenders operate at machine speed.

  ListenShow Notes
• 

  Episode #32

  32 - When AI Attacks – Part 2

  Jul 22, 202630 minS1

  Following Part 1's deep dive into GTG-1002 and the rise of autonomous cyber operations, Part 2 shifts toward what leaders must do to get ahead of next-generation AI-enabled threats. Guest Nury Turkel explains how regulatory risk forms long before official rulemaking, often emerging first through congressional hearings, agency speeches, draft legislation, and national-security analyses. Nury argues that organizations gain an advantage by tracking long-term trendlines—such as bipartisan momentum and multi-agency action—rather than reacting to headlines, and by cultivating geopolitical literacy and responsible leadership. The conversation concludes with emerging AI-related risks to the defense industrial base and practical steps leaders can take to reduce technical debt, strengthen resilience, and stay ahead of next-generation threats. References: Wall Street Journal: China Tells Its AI Leaders to Avoid U.S. Travel Over Security Concerns (paywall) Bloomberg: China Expands Travel Curbs to Top AI Talent at Private Firms (paywall) Reuters: China Restricts Overseas Travel for Top AI Talent at Alibaba, DeepSeek

  ListenShow Notes
• 

  Episode #31

  31 - When AI Attacks – Part 1

  Jul 14, 202634 minS1

  AI-enabled cyber operations have moved from theory to reality, with the GTG-1002 incident marking the first widely recognized case of an AI system independently executing a multi-step intrusion. In this 2-episode conversation, Nury Turkel explains how this shift is reshaping national security—from adversaries using AI to accelerate reconnaissance and credential misuse to the growing geopolitical stakes between the U.S. and China in advanced AI development. The episode highlights how governments and organizations must rethink readiness, regulation, and innovation as AI becomes both a transformative capability and a destabilizing force in global competition. References: Wall Street Journal: The First Large-Scale Cyberattack by AI (paywall) Anthropic Report on GTG-1002: Disrupting the first reported AI-orchestrated cyber espionage campaign (download)

  ListenShow Notes
• 

  Episode #30

  30 - Teaching AI to Protect CUI

  Jun 16, 202622 minS1

  AI is rapidly transforming how organizations identify, classify, and protect sensitive information, yet many are only beginning to understand what this means for CMMC, CUI, and their broader security programs. In this episode, we explain why understanding your data has become one of the most urgent challenges in modern cybersecurity and how AI‑driven tools can quickly reveal hidden sensitive information. This new intelligence helps organizations accurately define the true boundaries of their enclave and reduce assumed scope by pinpointing who actually interacts with CUI. We also cover how: Traditional tools like DLP, firewalls, and endpoint security often produce overwhelming, low‑value alerts. Adding richer, context‑aware data intelligence makes policies more precise and reduces alert fatigue. Enhanced intelligence strengthens enforcement as sensitive files move across the environment. It also improves operations by identifying stale or redundant data and reducing risks as organizations adopt AI. Strong AI guardrails are essential, including managing model permissions, inputs, outputs, and using MCP server‑based controls to block improper data flow.

  ListenShow Notes
• 

  Episode #29

  29 - Modernizing the Shop Floor: Security, Efficiency and Survival

  Jun 2, 202634 minS1

  <p>Manufacturing sits at the heart of the Defense Industrial Base, yet many machine shops are only now grappling with what CMMC truly means for handling engineering data. In this episode, Paul Van Metre explains the practical challenges shops face, from managing drawings and CAD models that clearly qualify as CUI to updating decades-old processes never designed for cybersecurity.</p> <p>We discuss why CUI is so widespread on the shop floor, how traditional "print-and-post" workflows increase exposure, and why moving to digital, paperless processes can significantly reduce both scope and cost. Paul highlights the mindset barriers many shops encounter...

  ListenShow Notes

Recent guests on Cyber Compliance & Beyond. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.