This episode is part of Baselines & Anomalies, a podcast from The CP Journal that examines events through the left of bang framework.
Episode Summary
Artificial intelligence is changing more than the tools available to defenders and attackers—it is changing the speed at which organizations are expected to adapt. In this episode, we examine CISA’s decision to reduce the time federal agencies have to patch critical cybersecurity vulnerabilities from roughly three weeks to just three days and explore why that policy change matters far beyond cybersecurity.
Rather than focusing on patch management itself, this episode uses the directive as a case study to examine a broader leadership challenge: how organizations respond when performance expectations suddenly change. As adversaries become faster and more capable, leaders must understand which capabilities need to evolve—and how to adapt their plans, people, resources, skills, and validation processes to meet a changing environment.
