Alyson M. Laderman, Esq.

Alyson M. Laderman, Esq. CEO/Executive Director/Co-Founder of Cyber Mettle. www.alysonladerman.com She/Her

At the intersection of law, business, and technology, I translate complex legal and operational needs into technology strategies organizations can actually execute.

Last night, we ventured out to the theater (for the first time in years) to see Coyote vs. Acme. Understandably, much ha...
08/30/2026

Last night, we ventured out to the theater (for the first time in years) to see Coyote vs. Acme. Understandably, much has been discussed about the main themes of corporate greed and control. However, what personally resonated was Will Forte's character's professional and personal journey.

Attorney Kevin Avery is afraid of losing. He has apparently stepped away from more difficult, emotionally demanding cases and built a smaller professional life around routine matters. He lives in a hotel, which seems odd, but in reality it's where there are fewer decisions to make, fewer responsibilities to manage, and fewer things capable of going wrong. Much like John Cena's character did, it would be easy to judge him for retreating and deem Avery as unsuccessful. Instead, I understood him.

Lawyers are hired to enter conflicts that other people cannot resolve. We absorb the facts, uncertainty, financial stakes, anger, and fear, then accept responsibility for guiding someone through a system whose outcome we cannot control. We can prepare thoroughly, exercise sound judgment, and advocate effectively. We cannot control the facts we inherit, the witnesses, opposing counsel, our clients, the judge, the jury, or how the law will ultimately be applied. In litigation, both sides may have capable lawyers and reasonable arguments, but only one side may leave with the ruling it wanted.

Still, lawyers are expected to win. Clients may experience an unfavorable outcome as their lawyer’s failure. Some lawyers internalize that expectation until every adverse ruling or lost case feels like a judgment of their competence or worth. That gap between responsibility and control carries a psychological cost.

Candidly, there have been periods when I deliberately stepped back and chose more routine, less emotionally demanding cases. After years of handling difficult, energy-sapping matters, reducing the weight I carried was a way to avoid burning out entirely. Perhaps that's why I did not see Forte’s character as someone who lacked ambition or courage. I saw someone trying to remain functional within a profession that often celebrates endurance while providing too little support for the consequences.

An American Bar Association publication reported that a 2024 survey of lawyers and legal professionals found 69% experiencing anxiety and 36% experiencing depression. Yet when a lawyer reduces a caseload, chooses less demanding work, establishes firmer boundaries, or steps away from a "prestigious" path, the decision may still be treated as weakness.

We should be slower to judge. Making a professional life smaller or more predictable can reflect self-awareness rather than failure. Sometimes it's an attempt to recover. Sometimes it's what allows a lawyer to remain in the profession at all. Rather than talking about making lawyers more resilient, we should ask why the profession requires so much resilience for so long, and whether we are willing to support lawyers who recognize that continuing at the same intensity is no longer sustainable.

American Bar Association and The Florida Bar -- this is a conversation we should continue having in and for our profession.

Thank you for all of the support and congratulations on earning the IAPP AIGP certification yesterday! To say this consu...
07/30/2026

Thank you for all of the support and congratulations on earning the IAPP AIGP certification yesterday! To say this consumed the last 30 days of my life is an understatement.

For those considering or currently preparing for this certification, this photo shows what the process looked like for me: a ridiculous amount of handwritten notes, flash cards, repeated videos, quizzes, practice exams, and trying to make all the pieces connect.

I took Kyle David, Ph.D.’s Dr. Privacy Masterclass because I wanted structure, accountability, and the opportunity to talk through the material with others. I wrote notes for every video, listened to many again, completed four 50-question quizzes, made handwritten flash cards for questions I missed or was unsure about, and took five full-length practice exams, including one from IAPP.

Despite all of that preparation and high practice-exam scores, parts of the actual exam still surprised me.

This is not a certification you can prepare for through memorization alone. You need to understand the concepts, how they relate, and how they may apply in a scenario.

Based on an invaluable recommendation from certification exam guru Omar Sangurima, DIT, I also used Claude, ChatGPT, and NotebookLM to supplement my studying, with one important caveat: AI is useful only if you understand enough of the material to challenge what it gets wrong.

You cannot start with AI and assume its answers are correct. The foundation must come from the course materials, the IAPP Body of Knowledge, and the IAPP glossary.

Once I had that foundation, I used AI to make studying more interactive. Claude created games with matching cards, timed multiple-choice questions, and longer scenarios. My ChatGPT business account was especially helpful in generating detailed scenarios, explaining why answers were right or wrong, and identifying areas where I needed to refocus.

That approach worked because I learn by applying concepts, testing my reasoning, and understanding the mechanics behind them. I also need to write everything down by hand so it can be uploaded into my personal brain-computing system. I work with an older but reliable operating system. 😅

My best advice is to study in the way that works for you, at the pace that works for you. Learn the source material first. Then use AI to test and deepen your understanding, not as a substitute for it. There is no shortcut to this certification.

The exam is one milestone. Learning how to apply AI governance in practice is the real work. Certification exams rarely test practical application fully. In practice, no one needs to recite every article of a law or regulation from memory. We can look those provisions up. The harder skill is knowing what applies, how the requirements interact, and how to translate them into governance people will actually follow rather than policies that exist only on paper.

Wishing everyone pursuing this certification the best in their AI governance journey.

Also, snacks and patience. Bring lots of patience. Oh, and curiosity! I'd love to get selected for jury duty one day, bu...
07/21/2026

Also, snacks and patience. Bring lots of patience. Oh, and curiosity!

I'd love to get selected for jury duty one day, but I'm realistic that will not likely happen.

Summoned for jury service and not sure what to bring? We've got you covered! Before you head to the courthouse, check out this quick list to help you prepare for the day. For more information about jury service, visit: ninthcircuit.org/jurors

07/21/2026

Is cybersecurity really facing a talent shortage—or are we looking at the problem the wrong way?
In this episode of The Cyber Mettle Podcast, Omar and Alyson welcome Jakub Zvernia, Technical Program Lead for Cyber Path, Australia's national cyber workforce professionalization pilot delivered by the Australian Computer Society.
Together they explore why thousands of aspiring cybersecurity professionals struggle to land their first role despite persistent workforce shortages, why organizations need to rethink hiring, and how skills-first career pathways could reshape the future of the industry.
The conversation also examines:
• Why traditional recruiting models may be holding organizations back• The value of neurodiversity and diverse thinking in cybersecurity• How employers can better support career changers and veterans• Why cybersecurity education alone isn't enough• Building practical career pathways beyond entry-level roles• Why organizations—not just individuals—must invest in workforce development• Lessons from Australia's CyberPath initiative that have global relevance
Whether you're a cybersecurity practitioner, hiring manager, executive, educator, student, or someone considering a career transition into cyber, this discussion offers practical insights into building a stronger, more resilient workforce.
Chapters00:00 Opening & Introducing Jakub Zvernia
02:18 What Is Cyber Path?
05:07 Why Graduates Still Can't Get Hired
08:55 The Business Case for Skills-Based Hiring
12:23 Career Changers, Veterans & Hidden Talent
16:55 Building Cyber Talent from Nontraditional Backgrounds
19:33 Why Entry-Level Isn't the Real Skills Gap
25:52 Preparing for an Aging Cyber Workforce
28:43 Learning Beyond Certifications
32:10 Why Employers Must Change Too
35:14 A Call to Action for the Cybersecurity Industry
37:01 Final Thoughts
If you enjoyed this conversation, subscribe to The Cyber Mettle Podcast for more discussions at the intersection of cybersecurity, leadership, resilience, governance, and human performance.

07/14/2026

The IAPP AIGP certification is becoming one of the most sought-after credentials in AI governance, but what does preparing for it actually teach you?

In this episode of The Cyber Mettle Podcast, Omar Sangurima and I go beyond exam prep to discuss something much bigger: how professionals actually learn.

As I am working through an intensive 28-day AIGP bootcamp with Dr. Kyle David (Dr. Privacy), the conversation explores:

* Why memorization isn't enough
* How certification exams can better validate real-world skills
* AI governance versus legal practice
* Different learning styles
* Study strategies that actually work
* Why asking questions is a professional strength, not a weakness
* The surprising value of learning communities

The discussion also highlights Dr. Kyle David's AIGP Master Class and why community, mentorship, and collaboration may ultimately become the most valuable part of the certification experience.

Whether you're studying for the AIGP, working in AI governance, cybersecurity, privacy, compliance, legal, or risk management, this conversation offers practical advice that extends far beyond one exam.

Chapters

00:00 Welcome Back to Cyber Mettle
03:04 Alyson Announces Her AIGP Journey
06:04 Why the AIGP Is Such a Challenging Certification
07:10 Should Certification Exams Test Memorization?
11:26 Real AI Governance vs. Passing the Test
16:03 What Better Certification Exams Could Look Like
20:54 Everyone Learns Differently
27:37 Inside an AIGP Master Class
33:17 Why Smart People Stay Quiet
39:57 Alyson's Personal Study Strategy
43:20 Learning, Humor & (Yes) Clown College
46:12 Ego Is the Enemy of Learning
53:45 Building Real Professional Relationships
55:09 Omar's Toastmasters Leadership Lesson
1:00:24 How to Create Better Learning Communities
1:02:22 Final Thoughts: Be Human

🎙 Subscribe for conversations on cybersecurity, AI governance, leadership, privacy, resilience, and professional growth.

06/30/2026

Can AI actually improve pe*******on testing, or does it create an entirely new attack surface?
In this episode of The Cyber Mettle Podcast, Omar Sangurima and Alyson Laderman sit down with cybersecurity researcher and executive Dan Shallom to explore how agentic AI is reshaping offensive security, vulnerability discovery, and security assessments.Dan explains why today's AI isn't simply making pe*******on testing faster—it's changing how security teams think about attack surfaces, business risk, and human expertise.
Topics include:
• Traditional pe*******on testing vs. AI-assisted assessments• Why consistency and coverage remain major security challenges• Building AI agents that understand application workflows—not just vulnerabilities• OWASP Top 10 for LLMs and the new risks AI introduces• Why AI needs layered security, guardrails, and governance• Business-contextualized vulnerability prioritization• Human judgment vs. AI reasoning in cybersecurity• Why AI should augment—not replace—security professionals
Whether you're a CISO, security leader, pe*******on tester, application security engineer, or simply trying to understand where AI fits into cybersecurity, this conversation offers practical insights grounded in real-world experience.If you enjoy conversations about cybersecurity, resilience, leadership, governance, and emerging technology, subscribe to The Cyber Mettle Podcast for future episodes.

Chapters
00:00 Opening and Inspector Gadget nostalgia
01:22 Meet Dan Shallom
02:34 Traditional Pen Testing vs Agentic AI
05:42 Why Coverage and Consistency Matter
07:35 Hidden Attack Surfaces Inside Modern Applications
08:47 AI Guardrails and Secure Implementation
10:14 Can AI Discover Novel Attacks?
15:18 Why Access Control Remains a Major Challenge
17:45 Business Context Beats Raw CVSS Scores
23:08 Moving Beyond Traditional Vulnerability Scanners
25:20 Human Judgment Still Matters
29:21 OWASP for LLMs and AI Attack Surfaces
33:16 Security by Design
36:16 Can Legacy Organizations Adopt AI?
40:14 Infrastructure, LLMs and Modern Risk
43:14 Final Advice for Organizations Using AI
44:49 Closing Thoughts

06/23/2026

Thinking about the AAIR certification from ISACA?Just hours after completing the Advanced AI Risk (AAIR) exam, Omar Sangurima sits down with Alyson Laderman to share his candid experience, preparation approach, key takeaways, and lessons learned from one of ISACA’s newest AI-focused certifications.In this Cert Corner episode, Omar discusses how the AAIR exam compares to certifications like the AIGP, why "ISACA mode" matters when approaching certification exams, the role of AI risk within broader enterprise risk management programs, and what cybersecurity, governance, and risk professionals should understand about AI risk today.The conversation explores practical study strategies, exam structure, governance frameworks, AI risk management concepts, and why understanding business risk may be just as important as understanding the technology itself.Whether you're considering the AAIR certification, working in AI governance, cybersecurity, risk management, compliance, audit, or simply trying to understand how AI risk is evolving inside organizations, this episode offers a real-world perspective from someone who just completed the exam.
In this episode:
• Omar's immediate reaction after completing the AAIR exam• How the exam compares to AIGP and other ISACA certifications• Understanding "ISACA mode" and certification mindset• AI Risk Management Framework (AI RMF) preparation strategies• Governance, risk, and AI integration challenges• Why context matters when answering certification questions• The relationship between AI risk and enterprise risk management• Whether AI risk deserves its own certification domain• Lessons learned for cybersecurity and risk professionals
Chapters
00:00 - Fresh Off the Exam: Initial AAIR Reactions02:02 - What Is the AAIR Certification?04:15 - Exam Format, Cost, and Proctoring Experience06:39 - Comparing AAIR and AIGP Preparation08:21 - Understanding “ISACA Mode”11:44 - Certification Study Pitfalls and Exam Dumps13:11 - Study Strategy and Preparation Approach20:14 - How the Exam Questions Are Structured27:04 - Key Domains and AI Risk Concepts31:25 - Does AI Risk Deserve Its Own Certification?36:46 - The Real Value of the Certification40:35 - Final Advice for Future Candidates42:48 - Why Studying AI Risk Matters

06/16/2026

Your backups may be protected. Your data may be protected. But what happens if you lose access to the systems that let you access everything else?

In this episode of The Cyber Mettle Podcast⁩ , Omar Sangurima and Alyson Laderman sit down with Muli Motola, CEO and Co-Founder of Acsense, to discuss one of the most overlooked areas of cybersecurity and resilience: Identity and Access Management (IAM).

As organizations continue moving to the cloud and embracing Zero Trust architectures, identity systems have become the foundation of modern operations. Yet many businesses still lack a recovery strategy for the very systems that control access to everything else. Muli shares the real-world incident that inspired Acsense, lessons learned from large-scale identity-related breaches, and why identity resilience is becoming a board-level business issue.

Topics include:

* Why IAM has become a critical business dependency
* The hidden risks of cloud-based identity systems
* Shared responsibility between vendors and customers
* Lessons from MGM and Caesars Palace
* Identity resilience and disaster recovery planning
* Operational mistakes versus cyberattacks
* AI, automation, and identity management risk
* Single points of failure in modern IT environments
* What boards and executives should be asking today
* How organizations can prepare for identity-related disruptions

If your organization relies on cloud services, SaaS applications, remote work, customer portals, or Zero Trust security models, this conversation is essential listening.

RESOURCES FROM ACSENSE

Want to learn more about Identity Resilience, IAM Recovery, and Disaster Recovery Planning? Muli Motola and the Acsense team have published several free resources, including their Disaster Recovery Guidebook for Identity and Access Management.

Explore the full resource library: https://acsense.com/resources/white-papers/ Recommended resource: Disaster Recovery Guidebook for Identity & Access Management

Whether you're a CISO, IT leader, MSP, security practitioner, or business executive, these guides provide practical frameworks for thinking about identity resilience, recovery planning, and operational continuity.

🎙 About The Cyber Mettle Podcast The Cyber Mettle Podcast explores the intersection of law, business, cybersecurity, technology, resilience, and leadership. Hosted by Omar Sangurima and Alyson Laderman

🔔 Subscribe for future conversations on cybersecurity, resilience, business continuity, leadership, AI, governance, and emerging technology.

06/09/2026

Can AI make organizations more effective without replacing people?

Cybersecurity leader Joshua Copeland joins Omar Sangurima and Alyson Laderman to discuss AI, workforce development, cybersecurity, governance, and the unintended consequences of automation.
In this episode:• Why AI should augment people rather than replace them
• The hidden costs of AI adoption
• AI-generated code and cybersecurity risks
• Workforce development and employee retention
• AI bias and accountability
• The future of human judgment in an AI-driven world
Joshua also shares the story behind his widely followed "Unpopular Opinion" posts and explains why honest conversations are essential for the cybersecurity profession.


Key Topics

Artificial Intelligence
Cybersecurity
AI Governance
Workforce Development
Business Resilience
Leadership
Risk Management
Compliance

Connect with The Cyber Mettle Podcast
LinkedIn: https://www.linkedin.com/company/the-cyber-mettle-podcastWebsite: https://cybermettle.org

Chapters
00:00 Introduction and Guest Welcome
02:18 Joshua Copeland's Cybersecurity Journey
05:16 The Origin of "Unpopular Opinions"
08:33 Why Cybersecurity Needs More Honest Conversations
11:40 AI Should Augment People, Not Replace Them
15:00 The Real Cost of Replacing Employees
18:26 Startup Growth, Retention, and Innovation
21:00 Ego, Venture Capital, and AI Adoption
22:25 AI Coding, Vibe Coding, and Security Risks
24:23 Why Data Breaches Can End Small Businesses
26:55 The Hidden Costs of AI
30:31 Dependency, Skills Decline, and AI Reliance
32:57 Which Jobs Will Survive AI?
35:43 Human Judgment vs Artificial Intelligence
39:22 AI, Law, Liability, and Accountability
43:28 Hiring Bias and AI Training Data
46:45 Governance, Risk, and Organizational Responsibility
50:59 Final Thoughts on AI

06/02/2026

Most cybersecurity career advice focuses on technical skills. This episode explores the skill that often determines long-term success: building genuine relationships.

What does it take to build a successful cybersecurity career when your background isn't technical?

In this episode of The Cyber Mettle Podcast, Omar Sangurima and Alyson Laderman sit down with Arielle Cireseanu-Acevedo, Esq. to discuss career growth, networking, leadership, mentorship, storytelling, and the power of authentic relationships in cybersecurity and beyond.

Ari shares her journey from healthcare operations and legal work into cybersecurity leadership, proving that career transitions are possible when organizations invest in people and individuals remain committed to learning.

Topics include:

* Transitioning into cybersecurity without a technical background
* Why networking is really about relationships, not business cards
* Career development and internal mobility
* Building trust and professional credibility
* The value of mentorship and sponsorship
* Storytelling as a cybersecurity and leadership skill
* Soft skills that accelerate career growth
* Why kindness is a competitive advantage
* Creating opportunities through authentic human connection

Whether you're early in your career, considering a transition into cybersecurity, or leading teams, this conversation offers practical advice for building a career that lasts.

Subscribe for more conversations at the intersection of cybersecurity, leadership, business, law, and resilience.



CHAPTERS

00:00 – Introduction and Meet Arielle Cireseanu-Acevedo
02:15 – Ari's Career Journey Into Cybersecurity
08:13 – Why Organizations Should Invest in Their People
12:22 – Career Growth, Retention and Boomerang Employees
16:21 – What Networking Actually Means
20:23 – Networking Beyond Business Cards
23:21 – Food, Community and Building Connections
26:15 – Toastmasters and Public Speaking Growth
31:08 – Storytelling as a Career Superpower
36:33 – How Lawyers and Non-Technical Professionals Enter Cybersecurity
40:36 – Why Relationships Matter More Than You Think
46:23 – Gatekeeping vs Mentorship
50:11 – Building Authentic Professional Relationships
56:32 – Supporting Others Without Expecting Something Back
01:00:25 – Final Thoughts on Cyber Mettle

Address

1070 Montgomery Road #898
Altamonte Springs, FL
32714

Alerts

Be the first to know and let us send you an email when Alyson M. Laderman, Esq. posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Alyson M. Laderman, Esq.:

Shortcuts

Share