Collaborate Disseminate
It’s that time of the year, when anywhere you go (I mean on the internet, of course), there are wishlists galore. The toys wishlist, the kitchen wishlist, the tech gadgets wishlist, the list (no pun intended) is endless. But what do security leaders a… Continue reading A CISO’s Cybersecurity Wishlist
Whether it’s because the code is better, or whether the cybersecurity research community is giving the Microsoft guys a break, we only have 58 CVEs to deal with this month. This is roughly half of the CVEs we had last month, and the lowest count in a … Continue reading December 2020 Patch Tuesday: A Light Finale to a Heavy Year
This is the Part 2 of a 3-part blog on how to use the NIST cybersecurity framework without getting bogged down and lost in the minutia of the specification documents. Part 1 can be found here, and we recommend you read this piece first if you have not… Continue reading Operationalize the NIST Cybersecurity Framework Without Pulling All Your Hair Out (Part 2 of 3)
For the most part, CISOs today have the attention of their board of directors. This is great! However, many cybersecurity leaders lose track of 3 important facts when it comes to presenting to the board: You are presenting a complex topic to people wh… Continue reading 4 Things Every CISO Must Include in Their Board Presentation
Patch Tuesday Advisory (November 2020): Can we say Remote Code Execution? After a light October, it’s back to business as usual with 112 vulnerabilities patched, up from a paltry 87 last month. The big story for November however is on the urgent end o… Continue reading Patch Tuesday Update – November 2020
As a cybersecurity leader, you generally receive only a short time window in the board meeting for your update. During this time, you need to communicate key risks and remediation tactics, explain your strategic goals and plan, and answer questions; a… Continue reading 5 Mistakes CISOs Make in Their Board Presentations
Recently, Daniel Hooper, CISO at Varo Bank asked his LinkedIn network what their recipe for the first 90 days as a CISO would be. The post got 50+ responses but one that really stood out to me (and resonated with the whole group) was what NOT to do. T… Continue reading What NOT to Do in Your First 90 Days as a CISO
If you are the CISO of a mid-sized enterprise, end that zoom call and take a step back. You probably spent 60+ hrs in Zoom meetings this week. Your team has been working really hard over the last few months dealing with the change to a work-from-home … Continue reading End that Zoom call and take a step back…
Wikipedia defines cyber threat hunting as “the process of proactively and iteratively searching through networks to detect and isolate advanced threats that evade existing security solutions.” In practice, this is a very manual process where trained “… Continue reading The Big Lie in Threat Hunting
Almost every company has some sort of security training, along with several other training prompts to complete during the new hire process. But once initial training is complete, how often should you revisit? With the ever-changing cybersecurity lands… Continue reading Security Awareness Training: How Often Should Your Employees Get Retrained?