I don't sign s**t [The Industrial Security Podcast]

About this episode

Tim McCreight discusses the importance of not accepting significant risks in security leadership without proper escalation.

We don't have budget to fix the problem, so we accept the risk? Tim McCreight of TaleCraft Security in his (coming soon) book "I don't sign s**t" uses story-telling to argue that front line security leaders should not be accepting multi-billion dollar risks on behalf of the business. We need to escalate those decisions - with often surprising results when we do.

People in this episode

Guest: Tim McCreight

Topics covered

• risk management
• security leadership
• decision making
• storytelling
• business risks

Keywords

• risk
• security
• leadership
• decision making
• business
• storytelling

Mentioned in this episode

Organizations: TaleCraft Security

More episodes of The Industrial Security Podcast

• Rapid Recovery - When Security Fails [The Industrial Security Podcast] · December 13, 2025 · 44 min
• We can't - and shouldn't - fix everything [The Industrial Security Podcast] · November 21, 2025 · 55 min
• Medical Device Cybersecurity Is Tricky [The Industrial Security Podcast] · October 28, 2025 · 1h 4m
• Hardware Hacking - Essential OT Attack Knowledge [the industrial security podcast] · October 6, 2025 · 43 min
• Managing Risk with Digital Twins - What Do We Do Next? [the industrial security podcast] · September 8, 2025 · 46 min
• NIS2 and the Cyber Resilience Act (CRA) [The Industrial Security Podcast] · July 28, 2025 · 54 min