Episode #55
Decision Enablement: The Missing Link in Cyber Incident Response with Lisa Larson
Why do even the best cyber incident response playbooks fail during a real ransomware attack or data breach? Because the biggest vulnerability isn't in your systems — it's how leaders make decisions under pressure. In this episode of Cyber Security America, host Joshua Nicholson talks with Lisa Larson, founder of Awakening Performance, about the missing link in cybersecurity: decision enablement. After two decades leading enterprise technology organizations and six years in breach response, Lisa developed the GEAR Framework (Ground, Explore, Attune, Resolve) — a protocol for cutting through cognitive overload, stress, and bias when the stakes are highest. Josh and Lisa dig into real-world ransomware investigations, Hurricane Katrina disaster recovery, tabletop exercises that reveal which executives will crumble in a crisis, and why technical excellence alone isn't enough. In this episode: Why incident response playbooks collapse under real pressure The GEAR Framework for decision clarity in a crisis Cognitive overload and executive decision fatigue during ransomware attacks The "we'll just restore from backup" assumption that sinks recovery Splitting tactical vs. strategic incident bridges How CISOs should communicate with the C-suite mid-incident Executive ego in a crisis: fight, flight, freeze, fawn Why incident response retainers matter before the next cyber tsunami Burnout, stress, and knowing your own cognitive breaking point For CISOs, security directors, incident responders, SOC analysts, and business leaders responsible for crisis management. Connect with Lisa Larson: https://www.mindfulcorporatemastery.com Sponsored by Darkstack7 Cyber Defense — Incident Response, Ransomware Recovery, Penetration Testing, Virtual CISO, and Tabletop Exercises: https://www.darkstack7.com
