“𝗛𝗼𝘄 𝗱𝗼 𝘄𝗲 𝗸𝗻𝗼𝘄 𝗼𝘂𝗿 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻𝘃𝗲𝘀𝘁𝗺𝗲𝗻𝘁 𝗶𝘀 𝗮𝗰𝘁𝘂𝗮𝗹𝗹𝘆 𝘄𝗼𝗿𝗸𝗶𝗻𝗴?” [WDTD#361]
WDTD 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟭 During a recent discussion with a Board member, I was asked: “𝗛𝗼𝘄 𝗱𝗼 𝘄𝗲 𝗸𝗻𝗼𝘄…
Read more →Home / Insights
Category: Uncategorized
Practical thinking on information security, privacy and AI governance.
𝗪𝗵𝗼 𝗮𝗽𝗽𝗿𝗼𝘃𝗲𝗱 𝘁𝗵𝗶𝘀 𝗮𝗰𝗰𝗲𝘀𝘀? # [WDTD#360]
WDTD | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟬 A few years ago, an auditor asked a simple question during a review: “𝗪𝗵𝗼 𝗮𝗽𝗽𝗿𝗼𝘃𝗲𝗱 𝘁𝗵𝗶𝘀…
Read more →𝗧𝗵𝗲 𝗺𝗼𝘀𝘁 𝗱𝗮𝗻𝗴𝗲𝗿𝗼𝘂𝘀 𝗮𝘀𝘀𝗲𝘁𝘀 𝗶𝗻 𝗮𝗻 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻 𝗮𝗿𝗲 𝗼𝗳𝘁𝗲𝗻 𝘁𝗵𝗲 𝗼𝗻𝗲𝘀 𝗻𝗼𝗯𝗼𝗱𝘆 𝗰𝗼𝗻𝘀𝗶𝗱𝗲𝗿𝘀 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹. [WDTD#359]
WDTD | 𝗣𝗼𝘀𝘁 #𝟯𝟱𝟵 A lesson I’ve learned after years of audits, assessments, and incident reviews: 𝗧𝗵𝗲 𝗺𝗼𝘀𝘁 𝗱𝗮𝗻𝗴𝗲𝗿𝗼𝘂𝘀 𝗮𝘀𝘀𝗲𝘁𝘀…
Read more →What would happen if our security tools stopped working for 72 hours? [WDTD#357]
WDTD | Post #357 A question every Board, CISO, and Audit Committee should ask at least once a year: “What…
Read more →Employee Dependencies [WTDT#356]
WDTD | Post #356 A question I often ask during audits is: “If your most critical employee resigned today, what…
Read more →Most insider threats do not start with malicious intent [WDTD#355]
WDTD | 𝗣𝗼𝘀𝘁 #𝟯𝟱𝟱 Most insider threats do not start with malicious intent. They start with convenience. Someone bypasses a…
Read more →“𝗖𝗮𝗻 𝘄𝗲 𝗿𝗲𝗰𝗼𝘃𝗲𝗿 𝘁𝗵𝗲 𝗯𝘂𝘀𝗶𝗻𝗲𝘀𝘀 𝗳𝗮𝘀𝘁 𝗲𝗻𝗼𝘂𝗴𝗵 𝘂𝗻𝗱𝗲𝗿 𝗿𝗲𝗮𝗹 𝗮𝘁𝘁𝗮𝗰𝗸 𝗰𝗼𝗻𝗱𝗶𝘁𝗶𝗼𝗻𝘀?” [WDTD#354]
WDTD | Post #354 A lot of organizations believe they have a ransomware problem. In reality, many of them have…
Read more →𝗢𝗻𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗺𝗼𝘀𝘁 𝗼𝘃𝗲𝗿𝗹𝗼𝗼𝗸𝗲𝗱 𝗰𝘆𝗯𝗲𝗿 𝗿𝗶𝘀𝗸𝘀 𝘁𝗼𝗱𝗮𝘆 𝗶𝘀𝗻’𝘁 𝗺𝗮𝗹𝘄𝗮𝗿𝗲.𝗜𝘁’𝘀 𝗲𝘅𝗰𝗲𝘀𝘀𝗶𝘃𝗲 𝘁𝗿𝘂𝘀𝘁 𝗶𝗻 𝗰𝗼𝗹𝗹𝗮𝗯𝗼𝗿𝗮𝘁𝗶𝗼𝗻 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺𝘀. [WDTD#353]
WDTD | 𝗣𝗼𝘀𝘁 #𝟯𝟱𝟯 𝗢𝗻𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗺𝗼𝘀𝘁 𝗼𝘃𝗲𝗿𝗹𝗼𝗼𝗸𝗲𝗱 𝗰𝘆𝗯𝗲𝗿 𝗿𝗶𝘀𝗸𝘀 𝘁𝗼𝗱𝗮𝘆 𝗶𝘀𝗻’𝘁 𝗺𝗮𝗹𝘄𝗮𝗿𝗲.𝗜𝘁’𝘀 𝗲𝘅𝗰𝗲𝘀𝘀𝗶𝘃𝗲 𝘁𝗿𝘂𝘀𝘁 𝗶𝗻 𝗰𝗼𝗹𝗹𝗮𝗯𝗼𝗿𝗮𝘁𝗶𝗼𝗻 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺𝘀. Teams…
Read more →Weak Governance Over AI Training Data Integrity — When Poisoned Data Corrupts Trusted Intelligence [WDTD#352]
WDTD | Post #352 [Topic: Weak Governance Over AI Training Data Integrity — When Poisoned Data Corrupts Trusted Intelligence] Quick…
Read more →Weak Governance Over AI Agent Autonomy — When Autonomous Actions Outpace Security Oversight [WDTD#351]
WDTD | Post #351 [Topic: Weak Governance Over AI Agent Autonomy — When Autonomous Actions Outpace Security Oversight] Quick Insight:AI…
Read more →