Collaborate Disseminate
Want to hear a penetration testing joke? No, not this one: …but this one: Q: Do you need a pentest done? A: Not sure … will it make us secure? On a more serious note, the biggest challenge with tests of anything is of course how you act on … Continue reading The Bane of All Security Tests: Acting on Results
Want to hear a penetration testing joke? No, not this one: …but this one: Q: Do you need a pentest done? A: Not sure … will it make us secure? On a more serious note, the biggest challenge with tests of anything is of course how you act on … Continue reading The Bane of All Security Tests: Acting on Results
Here is my annual “Security Warrior” blog round-up of top 10 popular posts in 2017. Note that my current Gartner blog is where you go for my recent blogging (example), all of the content below predates 2011!
“New SIEM Whitepaper on Use Cases In-… Continue reading Annual Blog Round-Up – 2017
Most popular blog posts from my Gartner blog during the past month are: SIEM Use Cases – And Other Security Monitoring Use Cases Too! (security monitoring research) Important: How to Impress / Annoy an Analyst During a Vendor Briefing? Best / Wor… Continue reading My Top 7 Popular Gartner Blog Posts for December 2017
Please don’t laugh, but alongside our “Testing Security” research project (that will likely skew towards the high-maturity security audiences) we are also doing a new research project for mainstream organizations in Q1 2018. It will f… Continue reading New Research: Starting Your Detection and Response Capability
As I alluded here, we [Augusto and me] will be starting an epic new research project on testing security [BTW, should we codename it “Testing Security”, Augusto? :-)] First, a quick poll: how many types of security testing do you know? Let … Continue reading New Research: How to Actually Test Security?
About a year ago, I crowdsourced a collection of best/worst tips for Vendor Briefings (a one hour presentations from a technology vendor to a Gartner analyst) from other analysts, and now I finally found time to blog it, thanks for some motivation from… Continue reading Important: How to Impress / Annoy an Analyst During a Vendor Briefing? Best / Worst Tips Here!
About a year ago, I crowdsourced a collection of best/worst tips for Vendor Briefings (a one hour presentations from a technology vendor to a Gartner analyst) from other analysts, and now I finally found time to blog it, thanks for some motivation from… Continue reading Important: How to Impress / Annoy an Analyst During a Vendor Briefing? Best / Worst Tips Here!
As our SOAR research project is nearing completion, a reasonable question of “what other esoteric stuff deployed only by the top 1% we can research next?” “what other usable insight on new technologies we can provide?” We (Augus… Continue reading Threat Simulation Call to Action for 2018
So, we are wrapping up our research on the effective use of managed services for security and that debate of MSSP vs MDR came up … again! Gartner defined MDRs (here), perhaps a bit vaguely, as providers that “deliver services for buyers loo… Continue reading MSSP is/and/or/vs MDR?