Collaborate Disseminate
When I was younger, and printed newspapers were a more common household purchase, I remember fondly watching my mother play a game called “Spot the Ball.” For those of you not familiar with this, it consisted of a photograph of a recent football (socce… Continue reading Spot the Ball & Security Detection Games
Amazon’s, Google’s and Microsoft’s experiences with building massive infrastructures for the world allows for some fascinating insights into the future of IT security at scale. As a result, when Google published The CISO’s Guide to Cloud Security Trans… Continue reading Google’s Office of the CISO Points the Way Towards Scaling Security
Getting teams to improve security can be hard work, but it’s an important job that organisations must take seriously to protect an increasingly risky world. For this post, I wanted to explore some ways that an organisation or individual might start bui… Continue reading Define, Reinforce and Track: Helping Develop Positive Cybersecurity Habits
Misconfigurations remain one of the most common risks in the technology world. Simply telling organisations to “fix” this problem, however, is not as easy as it might first seem because there’s a myriad of technologies at play in modern infrastructure … Continue reading Cloud-Based Storage Misconfigurations – Understanding the Security Risks and Responses
The notion that the time we are living in now is “unprecedented” is a common one, but historians and philosophers alike will happily note that things are rarely so different that we can’t learn a lot from the past. Despite IT often being dominated by f… Continue reading From Alan Turing to Future Artificial Intelligences – Reading Security Signals
As more infrastructure is moved to the cloud, there are many opportunities to reconsider your security stance and relationships to build ever stronger and more secure IT solutions whilst reducing your security costs. In this post, I’m looking to explor… Continue reading Building a Security Alliance with Your Cloud Partners
I’ve spoken before about Zero Trust approaches to security, but for many of those starting on their journey, there isn’t an obvious place to start with the model. With this post, I wanted to share an example approach I’ve seen working that many organis… Continue reading Preventing Shadow IT from Blindsiding your Zero Trust Plan
In a fast-changing world, stopping to assess your success isn’t really an option anymore. It is increasingly important that security teams are constantly proving their worth and tracking their successes with a view to constantly improving so as to not … Continue reading Building Your Team up to Win the Security Arms Race
New technologies often present interesting challenges for security teams, with cloud services such as AWS, Azure and GCP providing particularly novel cases in comparison to “classic” on-premise systems. As cloud services race to add new fea… Continue reading Auditing Cloud Administrator Behavior as a Matter of Data Breach Preparedness
We have seen great strides in improving security tooling and processes over the past ten years. Via constantly maturing security models, security teams have become increasingly dependent upon an ever-more complex toolchain of products and services. But… Continue reading How Organizations Can Achieve Security Availability