Security Conversations are Better with Food
Erik Montcalm and Scott Shepard Make Lobster Poutine on Cooking with CISOs

RECIPE
Lobster Poutine
The recipe Erik made on the show, Lobster Poutine, is one of his favorites from Chuck Hughes. If you’ve not heard of Chuck, he’s the executive chef and owner of a hot restaurant in Montreal, Garde Manger. He’s also the first Canadian chef to beat Bobby Flay on Iron Chef!
Prep: 15 min -- Cook: 30 min -- Serves: 4
- 4 lobsters, each 1 to 1. lb (500 to 675 g)
- 4 cups (1 L) lobster stock
- 2 tbsp (30 mL) butter
- salt and freshly ground pepper
- canola or peanut oil for deep-frying
- 6 Yukon Gold potatoes (unpeeled), julienned
- 1 lb (450 g) cheese curds
- finely chopped chives, for garnish
1. In a large pot of boiling salted water, cook the lobsters for 2 minutes. Cool in ice water. Remove meat from the shell and set the lobster meat aside.
(If you do this ahead of time, chill the lobster meat and use the shells for making the lobster stock.)
2. For the gravy, reduce the lobster stock by half until it is thick enough to coat a spoon. Whisk in the butter a spoonful at a time. Season with salt and pepper. Add the lobster meat and gently reheat it while you make the frites.
3. For the frites, heat the oil in a deep-fryer or large, deep pot to 300°F (150°C).
4. Dunk the potatoes in the hot oil for 2 to 3 minutes to blanch them. Drain and let sit for a few minutes. Heat the same oil to 350°F (180°C). Cook the frites 2 to 3 minutes more, until golden and crispy. Drain on paper towels and season with salt and pepper.
5. Top the frites with the cheese curds and lobster gravy. Garnish with chives.

WATCH THE EPISODE
Erik Montcalm and Scott Shepard Make Lobster Poutine
Cooking with CISOs
Key Highlights from the Show Conversation:
What's the recipe for a good relationship with an MSSP partner?
Scott: What makes them a great partner is over the years they were able to adapt and change if we either swap stuff out or added skills. Today we have a small team that’s separate from the SOC work that they do.
We have a small team that helps us with insider threats and other investigations and everything else. And that was a skill they didn't have back then, right? And over the years they would shift and adjust to whatever we needed. So, they're way more than just a security operations team. They really are security experts in everything they do.
What's the future of security operations? Where do you see it going?
Scott: It’s interesting because I think with the age of AI and now with recent notable attacks where they've used Anthropic and Claude to really scale up an attack on a company, we've got to scale up our operations.
And so that shifts Secure Ops again from being there for the instant response to actually helping us build the agents. What I believe will happen like 2030, 2035, somewhere in that range, agents will be attacking us that are geared and delivered by the bad guys. We will have agents defending us and doing the basics of the blocking and tackling.
They’ll identify where the issues are and then turn it over to humans to make decisions. So [SecureOps] is upskilling their game into that space to help us build those agents and then drive that operation.