Architect and Firefighter: How a Modern CISO Leads in Crisis

About this episode

Alan Lucas discusses the dual role of a CISO in crisis management and cybersecurity leadership.

Alan Lucas always wanted to be an architect or a firefighter — as CISO of Worldstream and Greenhouse Datacenters, he has become both. In this episode, he joins host Steve Moore to explore leading cybersecurity at the intersection of design and crisis response. Alan traces his path from Fox-IT through a Dutch cryptocurrency exchange where he arrived post-breach to an organization under near-constant attack from nation-state threat actors. Leading a technically sophisticated but security-anxious leadership team, he learned the lasting power of transparency and directness — and his most memorable measure of success was not a technical control, but a CTO who finally slept through the night. The conversation goes deep into crisis communication. Alan and Steve discuss how the industry has matured from reflexive silence around breaches to embracing transparency as a trust-building tool, the danger of well-meaning legal edits that send customers chasing the wrong narrative, and why the CISO should hold final review over all public incident communications. He also shares his Security Champions Program, tabletop exercise design, and why knowing who to call in a crisis must be mapped out…

People in this episode

Host: Steve Moore

Guest: Alan Lucas

Topics covered

• cybersecurity
• crisis management
• transparency
• communication
• leadership
• ethical hacking

Keywords

• CISO
• crisis response
• security
• transparency
• communication
• ethical hacking
• trust
• incident management

Mentioned in this episode

Organizations: Worldstream, Greenhouse Datacenters, Fox-IT, Dutch cryptocurrency exchange, DIVD

More episodes of The New CISO

• Rogue Agents: The New Era of AI Insider Threats (part 2) · June 4, 2026 · 43 min
• Lessons From a Spy Hunter: The Real Cost of a Breach (Part 1) · May 14, 2026 · 35 min
• Your Most Valuable Skills Aren’t Technical · April 23, 2026 · 53 min
• From Chef to CISO: Unlocking the Recipe to Security Leadership · April 2, 2026 · 45 min
• Six Steps for Better Communication as a CISO · February 19, 2026 · 49 min
• The Four Cs: Why a Schoolteacher Makes a Great CISO · January 29, 2026 · 54 min