Defending Your Cybersecurity Budget Without Sacrificing Protection
A flat cybersecurity budget forces difficult decisions. But cutting every expense by the same percentage can weaken the controls your business depends on while leaving inefficient spending untouched. In a video published by Help Net Security on September 17, 2026, Cheri Hotman, Managing Partner of Hotman Group and a practicing vCISO and vGRC leader, discusses […]
Cybersecurity Is as Much Art as Science: Why Risk and Business Context Matter
Cybersecurity is technical, but technology alone does not determine whether a security program works. In the welcome episode of the Hotman Group podcast, Cheri Hotman explains why effective cybersecurity requires judgment, risk management, business alignment, people, process, technology, and the ability to make practical decisions within real-world constraints. Listen to the Episode In this introductory […]
Supply Chain Security: How to Build a Risk-Based Third-Party Risk Management Program
Every vendor relationship introduces risk. In this Hotman Group session, Cheri Hotman explains how organizations can move beyond questionnaires and annual compliance exercises to build a sustainable, risk-based approach to supply chain security and third-party risk management. Watch the Session Cheri walks through third-party risk, fourth-party dependencies, vendor tiering, inherent and residual risk, questionnaires, shared […]
Compliance vs. Security: How to Make Both Work Together to Reduce Risk
Compliance and cybersecurity are often treated like competing priorities: one focused on audits and the other focused on “real” security. In this Hotman Group session, Cheri Hotman explains why that framing is wrong — and how organizations can use compliance, cybersecurity, governance, people, process, and technology together to reduce risk and build a stronger security […]
A Practical Approach to Choosing the Right GRC Tool
With countless GRC tools on the market, how do you know which one is the right fit for your organization? The wrong choice can lead to wasted resources and unmet security goals. In this session, we’ll walk through real-world cases, breaking down why specific tools were chosen and how they were successfully implemented. You’ll learn […]
Bridging the Gap: Why Cybersecurity Tools Alone Aren’t Enough
Investing in the latest cybersecurity tools doesn’t automatically mean you’re secure. Many leaders feel the initial promise of a new solution—only to realize it’s not delivering the protection they expected. So, what’s missing? In this session, we’ll break down where the responsibility of the tool ends and where your team’s role begins. We’ll uncover why […]
Choosing the Right Cybersecurity Framework: A Practical Guide for Leaders
Speakers: Cheri Hotman and Tanya WadeHosted by: Hotman Group Why Choosing the Right Framework Matters Passing an audit is no longer enough. Many organizations still treat cybersecurity as a one-time project, something to “check off” rather than an integrated, living part of their business operations. During this session, Cheri Hotman and Tanya […]
The Audit Trap: Why Passing isn’t Protection
Think passing an audit means your cybersecurity program is solid? Think again. Many organizations unknowingly expose themselves to greater risk by relying on compliance checkmarks rather than a true security strategy. In this session, we’ll uncover the hidden dangers of audit-driven security, why “passing” may leave you more vulnerable, and the real steps leaders must […]
CMMC Compliance: Cutting Through the Confusion
Cybersecurity leaders want to know, in plain terms, what they need to do when it comes to CMMC to ensure compliance and customer contractual obligations. Join us for a conversation with cybersecurity experts about what’s actually needed to stay on track with CMMC compliance. We’ll dive into the real gaps you may be facing […]
Security Questionnaires: You Can’t Just Blame the Intern
Let’s face it—no one enjoys security questionnaires. They are tedious and time-consuming, and it’s easy to question their real effectiveness in mitigating security risks, especially since they’re often a check-the-box exercise. However, in today’s digital landscape, they are unavoidable for building and maintaining trust with customers. Join us as we confront this harsh reality: despite […]
