Unpatched – Ep.01: Why Passing the Audit Doesn’t Mean You’re Safe – With Larry Trotter & AJ Nawani

Most companies believe that once they pass a compliance audit — SOC 2, ISO 27001, HIPAA — they’re protected. They’re not. Being compliant and being secure are two very different things, and the gap between them is where breaches happen.

In this episode 1 of Unpatched by SharkStriker, AJ Nawani (Founder & CEO, SharkStriker) sits down with Larry Trotter II (Founder & Principal CISO, Inherent Security) to break down one of the most dangerous misconceptions in the cybersecurity industry — and what organizations need to do differently.

KEY TAKEAWAYS FROM THIS EPISODE

✅ Compliance sets a baseline — cybersecurity is what actually protects you
✅ Change Healthcare had SOC 2 — and still suffered the biggest breach in healthcare history
✅ “Checkbox security” gives organizations a dangerous false sense of safety
✅ Audits are point-in-time — threats are continuous and adaptive
✅ Building a real cybersecurity program will achieve compliance as a byproduct
✅ AI is rapidly expanding the attack surface through vulnerable APIs and vibe coding
✅ Network AND web app penetration testing are both still critical in 2025

ABOUT UNPATCHED BY SHARKSTRIKER

Unpatched is SharkStriker’s podcast series where industry leaders cut through compliance theater and talk about what actually keeps organizations secure. No checkbox answers. No fluff. Just real conversations about real threats.

New episodes coming soon.