Guides for the growing security team

Ryan McGeehan in Starting Up Security

Aug 14

Managing a quarterly security review

I like an approach that combines my favorite quarterly review practices I’ve been exposed to…

1 response

Ryan McGeehan in Starting Up Security

Nov 9, 2023

Follow-Up: SolarWinds Response to SEC Lawsuit

SolarWinds has responded on their blog regarding the SEC’s lawsuit against them following their breach. Here is some analysis:

I wrote about lessons drawn from the SEC’s complaint a few days ago, and this essay discusses…

Ryan McGeehan in Starting Up Security

Nov 6, 2023

Lessons from the SEC’s Lawsuit against SolarWinds and Tim Brown

Ryan McGeehan in Starting Up Security

Oct 9, 2023

Vulnerability Management: You should know about EPSS

Ryan McGeehan in Starting Up Security

Mar 20, 2023

Talking about risk with thresholds 🔥

Imagine you encounter a fire in the woods. You’d instinctively decide to do one of two things:

1 response

Ryan McGeehan in Starting Up Security

Dec 8, 2022

A blameless post-mortem of USA v. Joseph Sullivan

1 response

Ryan McGeehan in Starting Up Security

Aug 24, 2022

Endpoint Security: Intuition around the Mudge Disclosures

1 response

Ryan McGeehan in Starting Up Security

Dec 9, 2019

Classifying types of “Security Work”

Applying the types of work from The Phoenix Project to security…

Ryan McGeehan in Starting Up Security

Sep 16, 2019

A key performance indicator for infosec organizations

Using probabilistic risk KPIs to direct complex…

2 responses

Ryan McGeehan in Starting Up Security

Feb 5, 2019

Measuring “In the Wild” Exploitation

Exploring our security expectations across browsers.

About

Starting Up Security

Guides for the growing security team

More information

Followers

1.4K

Elsewhere