In this episode of She Secures, host Heather Morrow welcomes Nett Lynch, Chief Information Security Officer at Kraft Kennedy, for a conversation about human-centered cybersecurity.
In the Beginning
Nett traces her path from ten years in technical IT roles through founding an MSP, where an early misstep with a nursery and landscaping client taught her the lesson that has shaped her career since: technical recommendations only land when they are translated into business outcomes. That realization, paired with an MBA, pushed her toward blending emotional intelligence with business acumen, the combination she now credits as the real differentiator for any technology advisor.
She shares the story of a reluctant first compliance engagement with a law enforcement client that was failing its CJIS (Criminal Justice Information Systems) attestation. By treating the review like a standard IT discovery and presenting the security gaps in plain business terms, including dormant accounts still held by former IT staff, she won the council’s approval on the spot, over an incumbent vendor who proposed no changes at all. The experience convinced her that compliance, handled well, is not a checkbox exercise but a genuine opportunity to raise an organization’s security posture.
Current Priorities
Nett walks through why she considers passwordless authentication the single highest impact change an organization can make, how building a genuine culture of security (constant, top-down communication rather than an annual training) is what actually changes behavior, and why she is already preparing clients for “Q Day,” the point at which quantum computing will be able to break today’s encryption, including passwords, in seconds. She also discusses why more law firms of every size are pursuing SOC 2 or ISO certifications to satisfy client security questionnaires and win larger clients, and why business owners should never assume their IT provider is covering every gap without independent validation.
Being Human
Throughout, Nett returns to the same theme: the human element, understanding a client’s motivations, fears, and business goals, is what turns a technical recommendation into a decision people actually act on.
Source: ILTA Voices Podcast #0232: (WIS) From Technical to Trusted
What’s Next
Continue the conversation with Nett, connect with Kraft Kennedy.
Follow Nett’s lead register for ‘Going Passwordless’ a Security webinar featuring Kraft Kennedy CIO Marcus Bluestein October 22, 2026 12pm ET.
About ILTA Women in Security
The mission of ILTA’s Women in Security committee is to empower and support women in the legal industry who are dedicated to advancing security practices. We aim to create a collaborative and inclusive community that fosters professional growth, mentorship, and innovation. We strive to enhance the security landscape within the legal sector and inspire the next generation of women leaders.