Collaborate Disseminate
The endpoint detection and response market is exploding! Here’s how to make sense of the options, dig deeper, and separate vendor fact from fiction. Continue reading 20 Endpoint Security Questions You Never Thought to Ask
Security has evolved to the point that I can now say that collection, sensing, and alerting are yesterday’s news. How can I make such a provocative statement? Wikipedia. Confused? That’s certainly understandable. I’ll explain.
Continue reading Collection, Sensing, and Alerting: Yesterday’s News
Security has evolved to the point that I can now say that collection, sensing, and alerting are yesterday’s news. How can I make such a provocative statement? Wikipedia. Confused? That’s certainly understandable. I’ll explain.
Continue reading Collection, Sensing, and Alerting: Yesterday’s News
I’ve always considered myself a pragmatist. Perhaps not surprisingly, I have also always been a big fan of pragmatism. I guess one goes along with the other. A pragmatist is defined as “a person who is oriented toward the success or failure of a particular line of action, thought, etc.; a practical person.”
This list will help you leverage the niche expertise of security-as-a-service providers, and assess which vendor can best meet your needs Continue reading 20 Questions To Explore With Security-as-a-Service Providers
As many of you are aware, I have spent quite a bit of time in Security Operations Centers (SOCs) over the course of my career. I remember one particular experience like it was yesterday. A high ranking executive came through for a whirlwind tour that literally lasted about 17 seconds. On her way out, she screamed, “I need more pictures on those big screens!”.
Continue reading Why Data Reduction is Key for Meaningful Visualizations
The game of 20 questions is a great way to separate vendors that meets your needs from those who will likely disappoint. Continue reading 20 Questions Security Leaders Need To Ask About Analytics
As the Greek philosopher Heraclitus famously noted, “the only constant is change”. This statement was as accurate 2,500 years ago as it is now. The world around us changes constantly, often times at a somewhat frenetic pace. The field of information security is no different. Both the organizations we support and the threat landscape we face are changing and evolving constantly.
Continue reading In Information Security, the Only Constant is Change
I have had the privilege of meeting some great security analysts during my time in the information security profession. One thing I experienced when I was an analyst, and that I’ve repeatedly noticed across the industry since then, is that even the best analysts need focus. Analysts that are focused on high fidelity, low noise alerts and the right workflow accompanying them are far more productive than analysts that are not. What do I mean by this? Allow me
Continue reading Maximizing Security Analyst Resources: It’s All About the Base
Why being practical and operationally minded is the only way to build a successful security program. Continue reading Theory Vs Practice: Getting The Most Out Of Infosec