SECOPS

Evolution of Warfare

The gradual shift from traditional warfare utilizing boots on the ground, artillery, and an air force to cyberwarfare techniques promoted by hackers with malware has been occurring for more than a decade. Clearly, soldiers and bombs are going nowhere anytime soon, but the use of cyberwarfare…

STAR Guidelines (Annotated by Rook Security)

Standards for Technology in Automotive Retails (STAR), is a nonprofit organization who has recently published suggested guidelines encouraging more attention to cybersecurity within the automotive industry. The guidelines contain two major stages…

What SecOps Means

“What the hell does SecOps mean, really?” I’ve heard derivatives of this question numerous times. From my perspective, the short answer is: “SecOps is a movement that’s making security everyone’s problem.”

Isn’t the InfoSec community great?

“One of our clients just received a Gdoc phishing email”

Distrust and Verify Anyway

Security is based on establishing trust. Who should you trust? When should you trust them? How much should you trust them? Often, this “trust” conversation centers on a binary distinction between “trusted insiders” and “unknown outsiders”. However, even the “trusted insider” can…

PM like a DM (part 1)

Software product managers gets to play in many different areas depending on their skill set and the needs of their company. Their day-to-day responsibilities may include stand-ups, one-on-ones, interviews, and any number of other tasks. Their primary role revolves around developing the…

Penetration Testing: What? When? Why?

Penetration testing, sometimes called “white hat hacking” or “ethical hacking,” is the process of allowing security professionals to attack your network and/or infrastructure just as a malicious hacker would do.

SECOPS Should Prioritize Alert Forward >

In the last few years, alert-throwing technology has (mostly) done its job. So, now what? Focus on managing the alert forward.

SOAR + SIRP + SOAP + TIP / X = ?

Questions without answers plague security management leadership and staff. SOMP brings a promise of fusing strategy, workload and metrics into one capability-enhancing platform.