Redefining CyberSecurity

While it may seem appealing — and you can certainly try — sorry, but you can't tech your way out of ethics issues. In this episode we speak to co-authors of a research paper to critique existing governance in cyber-security ethics as they did so in providing an overview of some of the ethical issues facing researchers in the cybersecurity community and highlighting shortfalls in governance practic...

What is an architecture? Is it a document? A process? A policy? A map? A discipline? A mindset? When you hear what it is, you may have to re-evaluate how you approach your cybersecurity program. Are you ready? “The ideal architect should be a man of letters, a skillful draftsman, a mathematician, familiar with historical studies, a diligent student of philosophy, acquainted with music, not ignoran...

Threat intelligence automation should be how we share, not how “Intel” is produced. Yet, we continue to create more data - generate more noise - introduce more false positive - require more analysis - increase the need for correlation - which, in turn, forces the need for more automation. Guests CyberSquarePeg (aka Rebecca Ford) On Twitter 👉 https://twitter.com/CyberSquarePeg Andy Piazza On Twitt...

Geopolitical winds of change are upending global supply chains at an unprecedented pace and scope. There are challenges and opportunities. Guest Andrea Little Limbago On Twitter 👉 https://twitter.com/limbagoa On Linkedin 👉 https://www.linkedin.com/in/andrea-little-limbago/ This Episode’s Sponsors Edgescan: https://itspm.ag/itspegweb Key Resources Security: https://itspm.ag/keyresources-2876 ____...

The CISO role has always been challenging. The last year brought the meaning of RESILIENCE to an all new level. Guest Dr Reem Faraj AlShammari On Twitter 👉   https://twitter.com/Q8Thunders On Linkedin 👉   https://www.linkedin.com/in/dr-reem-faraj-alshammari-b6324159/ This Episode’s Sponsors Blue Lava: https://itspm.ag/blue-lava-w2qs Key Resources Security: https://itspm.ag/keyresources-2876 ____...

Pushing the Panic or the Not Panic button may as well just be a difference in company culture. Planning, readiness, and experience are part of it, but not all of it. It all starts with how we define a crisis and how we react to it. Successfully leading an organization through a crisis is one of the most challenging – and rewarding – experiences a leader will face in their career. Effective executi...

Unless there's a plan that's been practiced, one's gut reaction is probably how things will roll when an incident occurs. #TableTopTuesday on Twitter from Meg Hargrove captures some of those "moments" — let's discuss. Before we do, though, do any of these sound like your go-to first step during a cyber incident? - “Brown alert” - “Cry for a minute” - “Update resume” While there may get a chuckle f...

A lot can be done by CSOs/CISOs to maximize value and reduce risks when working with PR/media. However, the path forward is not always straightforward. What are the common hiccups, screw-ups, and give-ups? As part of our ongoing "CISO functional relationships" series, in today's episode, we look at the role of PR and the media as a function of establishing and maintaining trust internally with the...

Nowadays, every company is pretty much a technology company, and as such, they all should have some understanding of quality assurance (QA). Also, an understanding of information security would be nice. The question is, how and where do these two worlds collide? And, is that security world AppSec or DevSecOps? Or is it something completely different? The QA role often approaches testing an applica...

The human resources department within any organization is well-positioned to feel the pulse and monitor a company's culture—teams, divisions, and the organization as a whole. Because of this, it could be the ideal ally to the InfoSec team. But is it? Let's find out. Consider the lifecycle of an employee. The initial company awareness, gaining familiarity with its brand, exploring its job opportuni...

We know that SOC team members are burning out as they try to protect companies, yet many InfoSec programs repeat the same strategies expecting different results. Can we take insanity out of the incident response? That's a good question. One that we're not going to answer, but one that we will discuss and hopefully encourage you all to think about with us as we try to get to the root of the problem...

Are technology patents helping us with innovation and collaborative creativity, or do they generate hyper complexity that is slowing our societies' advancement? Listen up, and maybe you will decide on your own. By awarding and defending technological patents, we promote innovation by offering intellectual property protection to the invention and the inventors for what they've created. However, whi...

The amount of work security teams have to handle is increasing exponentially and takes a severe toll on their ability to keep up with the threats. Thankfully, there is technology. Bring on security automation! Automation sounds simple enough, right? But is it? And do security teams automate the right things? When considering security automation, it's natural to look at the opportunity purely from...

Way too often, we think of cybersecurity professionals as if they come from another galaxy; Aliens, with no understanding of the business and not much to contribute to it. Well, it's not true. In this series, we explain why. There are exciting intersections between law, compliance, security, privacy, contracts, and business. It's time we talk about the value of building a strong relationship betwe...

Many organizations leverage regulations and standards to help them define their security and privacy programs, and in doing so, spend time and money creating policies, implementing controls, and monitoring for exceptions. But what happens when the regulation or standard changes? There's a seemingly constant barrage of change in the law and standards—and even in the supporting management/controls f...

We've had enough conversations about the relationship between technology, cybersecurity, and technology to know that people have different expectations, hopes, and visions. Some utopian, some dystopian, and some are Marcus J. Ranum. We met Marcus J. Ranum a few years ago during an ISSA Los Angeles Summit, where we had an inspiring and thought-provoking conversation about the idea of needing the eq...

Cybersecurity and business haven't played the same game — mostly because they did not understand each other. Thankfully, these days, security can not only be the business protector but a driving force for growth. We often hear stories about digital transformation and moving on-premises data centers to the cloud, but seldom get to listen to some of the specifics for many of these business-defining...

Zero Trust sounds impressive and futuristic, but it isn't really a new concept — and what does it actually mean? It is not that different from past trust models such as Trust But Verify and Least Privilege. So, here we are once again, stating the obvious: if we don't think differently about the problems we face, we're not going to be able to solve them. Security practitioners and managers are bomb...

Once upon a time—not that long ago—the Information Security field had no rules, definitions, tools, or framework, and it was a new frontier to be discovered and conquered. Now, looking back, we sure have come a long way. In this episode of the Business of Security channel, we travel in time with Matthew Rosenquist. Together we take a look back to understand how we got to today and what the future...

In today's episode, we get to connect with Ramy Katrib, Founder & CEO, and Nancy Jundi, COO - both of DigitalFilm Tree in Los Angeles. How do CEOs and their executive-level peers make decisions about their cybersecurity investments and how do the project and measure what is the outcome for that investment? Ramy and Nancy recognized the value of information security early on in the company’s develo...

Are you ready to "geek out" on 5G with my guests and me? Good! Put your thinking caps on and get ready to explore the world of 5G connectivity and all of the benefits it brings to society. Don't worry, though; we also take a good, hard look at how it changes the way we look at connectivity, data transport, data storage, data sovereignty, integrity, and more—all through the double lens of security...