Ciso

A "honeypot" is a specially designed and configured system that is normally placed within a network and is meant to attract attackers. The goal is to keep the attacker interested in the system for as long as possible so that analysts can gain an understanding of the tools and techniques…

This article was created from 20 years of working with and advising Federal CISOs. Originally published in May, 2019. Chief Information Security Officers (CISOs) around the world are challenged by the pace of the mission, increased scope, and flattened budgets. Regulations seemingly come out of nowhere. …

With the rising growth of the cybersecurity arena come cybersecurity challenges that CISOs must address and build the right strategy for the organization. There are multiple challenges that CISOs need to address starting with the cloud movement that can help companies to modernize their applications, increase efficiency and reduce cost…

Introduction A Chief Information Security Officer (CISO) is a person who is responsible for the overall security of an organization’s information and information systems. The CISO is responsible for developing and implementing security policies, procedures, and technologies to protect the organization’s data and assets from cyber-attacks and other threats. The CISO…

The SolarWinds hack was a significant event in the world of cybersecurity, as it demonstrated the potential for supply chain attacks to be used to gain access to a wide range of organizations. In a supply chain attack, hackers target a company or service that is used by many other…

The blurring of lines between software development and software deployment is one of the monumental shifts reshaping how we manage the task of cybersecurity. DevOps, the methodology that has emerged for managing this new take on the software development lifecycle, is so new that we’re even having trouble figuring out…

The NIS2 Directive, also known as the Network and Information Systems Directive, is a piece of EU legislation that was adopted in 2019 with the goal of improving the cybersecurity of critical infrastructure and essential services within the EU. …

As a cybersecurity professional, I know firsthand the importance of having strong policies in place to protect an organization from cyber threats. Without these policies, an organization is much more vulnerable to attacks, data breaches, and other security incidents. With that in mind, here are my five key cybersecurity policies…