Why do even the best cyber incident response playbooks fail during a real ransomware attack or data breach? Because the biggest vulnerability isn't in your systems — it's how leaders make decisions under pressure.

In this episode of Cyber Security America, host Joshua Nicholson talks with Lisa Larson, founder of Awakening Performance, about the missing link in cybersecurity: decision enablement. After two decades leading enterprise technology organizations and six years in breach response, Lisa developed the GEAR Framework (Ground, Explore, Attune, Resolve) — a protocol for cutting through cognitive overload, stress, and bias when the stakes are highest.

Josh and Lisa dig into real-world ransomware investigations, Hurricane Katrina disaster recovery, tabletop exercises that reveal which executives will crumble in a crisis, and why technical excellence alone isn't enough.

In this episode:

Why incident response playbooks collapse under real pressure
The GEAR Framework for decision clarity in a crisis
Cognitive overload and executive decision fatigue during ransomware attacks
The "we'll just restore from backup" assumption that sinks recovery
Splitting tactical vs. strategic incident bridges
How CISOs should communicate with the C-suite mid-incident
Executive ego in a crisis: fight, flight, freeze, fawn
Why incident response retainers matter before the next cyber tsunami
Burnout, stress, and knowing your own cognitive breaking point

For CISOs, security directors, incident responders, SOC analysts, and business leaders responsible for crisis management.

Connect with Lisa Larson: https://www.mindfulcorporatemastery.com

Sponsored by Darkstack7 Cyber Defense — Incident Response, Ransomware Recovery, Penetration Testing, Virtual CISO, and Tabletop Exercises: https://www.darkstack7.com