Applying Risk and Risk Management Practices In Your Organization Introduction “How cybersecurity assesses risk, and how it determines how much it reduces risk, are the basis for determining where cybersecurity needs to prioritize the use of resources. …

Applying Risk and Risk Management Practices In Your Organization Introduction In our previous article, Risk Concepts From The CISSP (Part 1), we discussed risk and risk terminology from the lens of the (ISC)² Official Study Guide. Whether or not you are pursuing this particular certification, these concepts have real-world significance since cybersecurity is a business risk, and finding ways to…

Applying Risk and Risk Management Concepts In Your Organization Introduction Looking back, I was pretty naive at the beginning of my journey to understand risk and apply that seed of understanding to a business’ risk set. Risk seems like a simple concept: what are we worried could go wrong, and how should we address these worries? …

Introduction — What is Zero Trust? As organizations increasingly rely on distributed users, data, and cloud-based systems as part of their digital transformation journeys, securing this expanded attack surface has become critical. Zero Trust is a security model, also known as Zero Trust Architecture (ZTA), that describes an approach to designing and implementing IT systems centered…

A novel about IT, DevOps, and helping your business win Originally published on balancedsec.com Introduction The Phoenix Project is a business novel by Gene Kim, Kevin Behr, and George Spafford, pioneers in the DevOps movement. The book follows the story of Bill, an IT manager at a parts manufacturer, struggling in a competitive market. Parts Unlimited, once a dominant player in…