What Moves the Cyber Resilience Needle the Most? It’s Probably Not What You Think
It's simple, but it's not easy: if you change the tech but not the culture, none of the gains you realize in the short term will be sustainable in the long term.
Security
43 posts
When To Say No To A Good Opportunity
Sometimes an opportunity looks and feels right, but it isn't. Here's how you can tell the difference.
Azure Has A Kerberos Problem, But It’s Not The One You Think
Blaming Azure for Kerberos exploits isn't a hot take—it's nonsense. Focus on the real root causes instead (which are different than you might think).
Integrating Threat Modeling with DevOps
Because DevOps has effectively joined the Operational and Dev domains, it introduces security dependencies which neither domain had to consider before.
Who’s Threat Modeling the Threat Modelers?
When an org's security personnel carry out threat modeling exercises, they tend to make unconscious assumptions about the efficacy of their own security controls. This is dangerous.
The Objective of Securing Privileged Access? To Protect the Business from the Admins
The most common privileged security gaps that attackers exploit come from sacrificing effective privileged admin security on the altar of operational convenience.
Healthy Work/Life Balance: 4 Critical Questions to Ask Yourself—And Your Employer
4 questions to help you assess where you are, and what to do about it.
How (not) to Waste Your Time Chasing Vulnerabilities
There is a very good chance that your vulnerability management efforts are not actually reducing your risk. The data tells us why.
Honest Self-Reflection for Security Leaders, Post-Breach: 3 Important Questions to Ask Yourself
There's never just one reason why a breach occurs, but leaders have a unique responsibility because they own budget, strategy, and prioritisation. Here are 3 questions to consider carefully.
3 Reasons Security Folks Roll Their Eyes When They Hear “Zero Trust”
The principles still matter, more than almost everything else in security...even if we're tired of hearing about it.