“𝗜𝗳 𝘄𝗲 𝗴𝗼𝘁 𝗯𝗿𝗲𝗮𝗰𝗵𝗲𝗱 𝘁𝗼𝗺𝗼𝗿𝗿𝗼𝘄, 𝘄𝗵𝗮𝘁 𝘄𝗼𝘂𝗹𝗱 𝘁𝗵𝗲 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗳𝗶𝗻𝗱 𝘁𝗵𝗮𝘁 𝘄𝗼𝘂𝗹𝗱 𝗲𝗺𝗯𝗮𝗿𝗿𝗮𝘀𝘀 𝘂𝘀?” [CR#370]
CR 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟳𝟬 A CEO once asked me a question that every security leader should be prepared to […]
“𝗪𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗯𝗶𝗴𝗴𝗲𝘀𝘁 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗿𝗶𝘀𝗸 𝘄𝗲’𝗿𝗲 𝗻𝗼𝘁 𝘁𝗮𝗹𝗸𝗶𝗻𝗴 𝗮𝗯𝗼𝘂𝘁?” [ CR#368 ]
CR 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟴 A senior executive once asked me: “𝗪𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗯𝗶𝗴𝗴𝗲𝘀𝘁 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗿𝗶𝘀𝗸 𝘄𝗲’𝗿𝗲 𝗻𝗼𝘁 𝘁𝗮𝗹𝗸𝗶𝗻𝗴 𝗮𝗯𝗼𝘂𝘁?”
“𝗪𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗯𝗶𝗴𝗴𝗲𝘀𝘁 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗿𝗶𝘀𝗸 𝘄𝗲’𝗿𝗲 𝗻𝗼𝘁 𝘁𝗮𝗹𝗸𝗶𝗻𝗴 𝗮𝗯𝗼𝘂𝘁?” [ CR#368 ] Read Post »
“𝗪𝗵𝗮𝘁 𝗶𝘀 𝘁𝗵𝗲 𝗼𝗹𝗱𝗲𝘀𝘁 𝘂𝗻𝗿𝗲𝘀𝗼𝗹𝘃𝗲𝗱 𝗿𝗶𝘀𝗸 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻?” [CR#367]
CR 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟳 Last week, I asked a group of security leaders a question that changed the direction
“𝗪𝗵𝗮𝘁 𝗶𝘀 𝘁𝗵𝗲 𝗼𝗹𝗱𝗲𝘀𝘁 𝘂𝗻𝗿𝗲𝘀𝗼𝗹𝘃𝗲𝗱 𝗿𝗶𝘀𝗸 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻?” [CR#367] Read Post »
“𝗪𝗵𝗶𝗰𝗵 𝘀𝘆𝘀𝘁𝗲𝗺 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗲𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁 𝗶𝘀 𝗰𝘂𝗿𝗿𝗲𝗻𝘁𝗹𝘆 𝗰𝗿𝗲𝗮𝘁𝗶𝗻𝗴 𝘁𝗵𝗲 𝗺𝗼𝘀𝘁 𝗿𝗶𝘀𝗸?” [CR#366]
CR 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟲 A few months ago, I asked a leadership team a simple question: “𝗪𝗵𝗶𝗰𝗵 𝘀𝘆𝘀𝘁𝗲𝗺 𝗶𝗻
“𝗪𝗵𝗶𝗰𝗵 𝘀𝘆𝘀𝘁𝗲𝗺 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗲𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁 𝗶𝘀 𝗰𝘂𝗿𝗿𝗲𝗻𝘁𝗹𝘆 𝗰𝗿𝗲𝗮𝘁𝗶𝗻𝗴 𝘁𝗵𝗲 𝗺𝗼𝘀𝘁 𝗿𝗶𝘀𝗸?” [CR#366] Read Post »
𝗪𝗲 𝗱𝗼𝗻’𝘁 𝗵𝗮𝘃𝗲 𝗮 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. 𝗪𝗲 𝗵𝗮𝘃𝗲 𝗮 𝗱𝗲𝗰𝗶𝘀𝗶𝗼𝗻-𝗺𝗮𝗸𝗶𝗻𝗴 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. [CR#364]
CR 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟰 A CISO once told me something that stayed with me: “𝗪𝗲 𝗱𝗼𝗻’𝘁 𝗵𝗮𝘃𝗲 𝗮 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆
𝗪𝗲 𝗱𝗼𝗻’𝘁 𝗵𝗮𝘃𝗲 𝗮 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. 𝗪𝗲 𝗵𝗮𝘃𝗲 𝗮 𝗱𝗲𝗰𝗶𝘀𝗶𝗼𝗻-𝗺𝗮𝗸𝗶𝗻𝗴 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. [CR#364] Read Post »
“Where does security context get lost inside our organization?” [CR#363]
CR Intelligence | Post #363 A pattern I’ve noticed in almost every major cyber incident review: The breach was detected.
“Where does security context get lost inside our organization?” [CR#363] Read Post »
One of the most expensive words in cybersecurity is: “𝗔𝘀𝘀𝘂𝗺𝗲𝗱.” [CR#362]
CR 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟮 One of the most expensive words in cybersecurity is: “𝗔𝘀𝘀𝘂𝗺𝗲𝗱.” We assumed the vendor was
One of the most expensive words in cybersecurity is: “𝗔𝘀𝘀𝘂𝗺𝗲𝗱.” [CR#362] Read Post »
“𝗛𝗼𝘄 𝗱𝗼 𝘄𝗲 𝗸𝗻𝗼𝘄 𝗼𝘂𝗿 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻𝘃𝗲𝘀𝘁𝗺𝗲𝗻𝘁 𝗶𝘀 𝗮𝗰𝘁𝘂𝗮𝗹𝗹𝘆 𝘄𝗼𝗿𝗸𝗶𝗻𝗴?” [CR#361]
CR 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟭 During a recent discussion with a Board member, I was asked: “𝗛𝗼𝘄 𝗱𝗼 𝘄𝗲 𝗸𝗻𝗼𝘄
“𝗛𝗼𝘄 𝗱𝗼 𝘄𝗲 𝗸𝗻𝗼𝘄 𝗼𝘂𝗿 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻𝘃𝗲𝘀𝘁𝗺𝗲𝗻𝘁 𝗶𝘀 𝗮𝗰𝘁𝘂𝗮𝗹𝗹𝘆 𝘄𝗼𝗿𝗸𝗶𝗻𝗴?” [CR#361] Read Post »
𝗪𝗵𝗼 𝗮𝗽𝗽𝗿𝗼𝘃𝗲𝗱 𝘁𝗵𝗶𝘀 𝗮𝗰𝗰𝗲𝘀𝘀? [CR#360]
CR | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟬 A few years ago, an auditor asked a simple question during a review: “𝗪𝗵𝗼 𝗮𝗽𝗽𝗿𝗼𝘃𝗲𝗱 𝘁𝗵𝗶𝘀
𝗪𝗵𝗼 𝗮𝗽𝗽𝗿𝗼𝘃𝗲𝗱 𝘁𝗵𝗶𝘀 𝗮𝗰𝗰𝗲𝘀𝘀? [CR#360] Read Post »
𝗧𝗵𝗲 𝗺𝗼𝘀𝘁 𝗱𝗮𝗻𝗴𝗲𝗿𝗼𝘂𝘀 𝗮𝘀𝘀𝗲𝘁𝘀 𝗶𝗻 𝗮𝗻 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻 𝗮𝗿𝗲 𝗼𝗳𝘁𝗲𝗻 𝘁𝗵𝗲 𝗼𝗻𝗲𝘀 𝗻𝗼𝗯𝗼𝗱𝘆 𝗰𝗼𝗻𝘀𝗶𝗱𝗲𝗿𝘀 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹. [CR#359]
CR | 𝗣𝗼𝘀𝘁 #𝟯𝟱𝟵 A lesson I’ve learned after years of audits, assessments, and incident reviews: 𝗧𝗵𝗲 𝗺𝗼𝘀𝘁 𝗱𝗮𝗻𝗴𝗲𝗿𝗼𝘂𝘀 𝗮𝘀𝘀𝗲𝘁𝘀