“How often do you review the trust you’ve placed in them?” [WDTD#374 ]
WDTD Intelligence | Post #374 A cybersecurity leader recently told me: “We review our vendors every year.” I asked a…
Read more →“𝗪𝗵𝗶𝗰𝗵 𝗼𝗳 𝗼𝘂𝗿 𝗰𝗼𝗻𝘁𝗿𝗼𝗹𝘀 𝗮𝗿𝗲 𝗽𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗻𝗴 𝘂𝘀 𝗳𝗿𝗼𝗺 𝘆𝗲𝘀𝘁𝗲𝗿𝗱𝗮𝘆’𝘀 𝘁𝗵𝗿𝗲𝗮𝘁𝘀? [ WDTD#373]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟳𝟯 A board member once asked a question that completely changed how we discussed cyber risk:…
Read more →“𝗪𝗵𝗶𝗰𝗵 𝗯𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗽𝗿𝗼𝗰𝗲𝘀𝘀 𝗴𝗲𝗻𝗲𝗿𝗮𝘁𝗲𝘀 𝘁𝗵𝗲 𝗺𝗼𝘀𝘁 𝗿𝗲𝘃𝗲𝗻𝘂𝗲?” [WDTD#371]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟳𝟭 A few years ago, during a security assessment, I asked a simple question: “𝗪𝗵𝗶𝗰𝗵 𝗯𝘂𝘀𝗶𝗻𝗲𝘀𝘀…
Read more →“𝗜𝗳 𝘄𝗲 𝗴𝗼𝘁 𝗯𝗿𝗲𝗮𝗰𝗵𝗲𝗱 𝘁𝗼𝗺𝗼𝗿𝗿𝗼𝘄, 𝘄𝗵𝗮𝘁 𝘄𝗼𝘂𝗹𝗱 𝘁𝗵𝗲 𝗮𝘁𝘁𝗮𝗰𝗸𝗲𝗿 𝗳𝗶𝗻𝗱 𝘁𝗵𝗮𝘁 𝘄𝗼𝘂𝗹𝗱 𝗲𝗺𝗯𝗮𝗿𝗿𝗮𝘀𝘀 𝘂𝘀?” [WDTD#370]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟳𝟬 A CEO once asked me a question that every security leader should be prepared to…
Read more →“𝗪𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗯𝗶𝗴𝗴𝗲𝘀𝘁 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗿𝗶𝘀𝗸 𝘄𝗲’𝗿𝗲 𝗻𝗼𝘁 𝘁𝗮𝗹𝗸𝗶𝗻𝗴 𝗮𝗯𝗼𝘂𝘁?” [ WDTD#368]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟴 A senior executive once asked me: “𝗪𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗯𝗶𝗴𝗴𝗲𝘀𝘁 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗿𝗶𝘀𝗸 𝘄𝗲’𝗿𝗲 𝗻𝗼𝘁 𝘁𝗮𝗹𝗸𝗶𝗻𝗴 𝗮𝗯𝗼𝘂𝘁?”…
Read more →“𝗪𝗵𝗮𝘁 𝗶𝘀 𝘁𝗵𝗲 𝗼𝗹𝗱𝗲𝘀𝘁 𝘂𝗻𝗿𝗲𝘀𝗼𝗹𝘃𝗲𝗱 𝗿𝗶𝘀𝗸 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻?” [WDTD#367]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟳 Last week, I asked a group of security leaders a question that changed the direction…
Read more →“𝗪𝗵𝗶𝗰𝗵 𝘀𝘆𝘀𝘁𝗲𝗺 𝗶𝗻 𝘆𝗼𝘂𝗿 𝗲𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁 𝗶𝘀 𝗰𝘂𝗿𝗿𝗲𝗻𝘁𝗹𝘆 𝗰𝗿𝗲𝗮𝘁𝗶𝗻𝗴 𝘁𝗵𝗲 𝗺𝗼𝘀𝘁 𝗿𝗶𝘀𝗸?” [WDTD#366]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟲 A few months ago, I asked a leadership team a simple question: “𝗪𝗵𝗶𝗰𝗵 𝘀𝘆𝘀𝘁𝗲𝗺 𝗶𝗻…
Read more →𝗪𝗲 𝗱𝗼𝗻’𝘁 𝗵𝗮𝘃𝗲 𝗮 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. 𝗪𝗲 𝗵𝗮𝘃𝗲 𝗮 𝗱𝗲𝗰𝗶𝘀𝗶𝗼𝗻-𝗺𝗮𝗸𝗶𝗻𝗴 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. [WDTD#364]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟰 A CISO once told me something that stayed with me: “𝗪𝗲 𝗱𝗼𝗻’𝘁 𝗵𝗮𝘃𝗲 𝗮 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆…
Read more →“Where does security context get lost inside our organization?” [WDTD#363]
WDTD Intelligence | Post #363 A pattern I’ve noticed in almost every major cyber incident review: The breach was detected.…
Read more →One of the most expensive words in cybersecurity is: “𝗔𝘀𝘀𝘂𝗺𝗲𝗱.” [WDTD#362]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟮 One of the most expensive words in cybersecurity is: “𝗔𝘀𝘀𝘂𝗺𝗲𝗱.” We assumed the vendor was…
Read more →