While everyone is trying to figure out what a return to their workplace will be like: using public transportation, public bathrooms and common break areas, CIOs and CISOs have something else on their minds as well. How to plan long term for a large remote workforce. Back in March, we all had this idea that “shelter …
It all started after chatting with a colleague the other day… He started telling me about a Tabletop Attack Scenario Exercise (TASE) that he sat through with a health care company. They were going through a mock scenario of a PHI breach. And at one point, the security director asked the procurement team to give …
what? building a notifications list on the fly…my mind is in a TASE Read More »
I’ve learned a lot by coaching my son’s youth soccer team. At the beginning of last season, his team had several boys ranging from ok to pretty good players. The only problem was they wouldn’t work together. They’d all either stand around and watch whenever they didn’t have the ball, or they would form a …
This can be one of those polarizing subjects (at least for security people) – cyber threat intelligence. Security people tend to either love the idea of collecting threat intelligence or they don’t see any value in spending time and money on it. But let’s start by defining it. Most times, cyber threat intelligence is packaged …
If you’ve think the average pen test is decreasing in value, you’re not alone. Don’t get me wrong, a well-scoped and well executed pen test provides a valuable snapshot of the technical (and not necessarily business) risk of a given system. But let’s face it, the pen test is a snapshot in time of a …
It’s a typical Monday morning, and your most senior analyst is staring at her screens. Not typing, not analyzing, just staring. You walk over to her and offer her a penny for her thoughts. Or maybe a cup of coffee or two. She looks at you and replies, “I don’t even know where to start”. …
Why would anyone reject win-win? Because honestly, it never turns out to be win-win. That’s just a cliche for one party to compromise in order to to come to an agreement. Turns out that by rejecting win-win you open the doors for so much more opportunity to be successful. And anyone who has read Jim …
It’s time to break down the silos and build strategy and process as a unified team Interested in learning more? Click here to join our membership site wait list. IT strategic plan – aligned with the business and coordinated with security Most organizations maintain an annual strategic plan that aligns IT strategy with the overall …
Why is security still being left out of the discussion? Read More »
With the numerous security blogs and news outlets (probably too many) not to mention paid threat feeds you can subscribe to, how do you stay on top of relevant security news and for that matter, threat intelligence?
A talk given at RSA this week by Avast’s EVP, GM and CTO Ondrej Vlcek about the attack and corruption of CCleaner had an interesting twist when the speaker noted that the most important lesson coming out of the episode wasn’t about the incident itself, or even the TTPs the attackers used. “A big lesson …
Why aren’t more companies focused on M&A cyber due diligence? Read More »
