Naomi Buckwalter, director of information security at Energage analyzed one thousand random information security job posts on LinkedIn. The most notable trend she found was that 43% of the posts had CISSP and 5-year experience requirements for entry level positions.…
Digital transformation. It’s definition is broad and so are the mechanisms to secure it. Check out this post for the basis for our conversation on this week’s episode which features me, David Spark (@dspark), producer of CISO Series, co-host Allan Alford (@allanalfordintx), and our guest is…
Secrets, such as passwords and credentials, are out in the open just sitting there in code repositories. Why do these secrets even exist in public? What’s their danger? And how can they be found and removed? Check out this post for the…
How does a CISO measure the performance of their security program? Sure, there are metrics, but what are you measuring against? Is it a framework or the quality of protection? How do you tell if your program is improving and…
Privacy is an uphill battle. The problem is those gathering the data aren’t the ones tasked with protecting the privacy of those users for whom that data represents. Check out this post for the basis for our conversation on this week’s episode…
Here are eight minutes of the best moments from “Hacking CISO Series: An hour of critical thinking and looking back at CISO Series coverage”. Watch the full video This was actually our second anniversary show featuring my co-hosts Mike Johnson…
Today is officially the anniversary of the CISO Series. The concept of the CISO/Security Vendor Relationship Series started back in January 2018, and then we launched our flagship podcast in June, 2018. While I initially was on another platform, the…
What’s the legal responsibility of a CISO? New cases are placing the liability for certain aspects of security incidents squarely on the CISO. And attorney-client privilege has been overruled lately too. What does this mean for corporate and for CISO…
Is XDR changing the investigative landscape for security professionals? The “X” in XDR extends traditional endpoint detection and response or EDR to also include network and cloud sensors. Having this full breadth, XDR can contextualize alerts to tell a more…
Many cybersecurity professionals use derogatory terms towards their users, like calling them “dumb” because they fell for a phish or some type of online scam. It can be detrimental, even behind their back, and it doesn’t foster a stronger security…
