I had a tremendous time at the InCyber Montreal forum. The speakers, panels, fellow practitioners, and events were outstanding!

I bumped into Dan Lohrmann and Nancy Rainosek before their panel with Sue McCauley on CISO challenges. We had some very int

Ransomware is one of the most devastating challenges in cybersecurity today. The attacks are vicious, expensive, impactful, and becoming commonplace.

Over the years I have predicted its rise, discussed why it is so challenging, debunked myths like bla

People often assume the goal of perfect cybersecurity is to be impervious to attack. That is not true! In fact, it is about an optimal balance between competing goals and limitations such as costs, user friction, and acceptable risks.

Please click th

Far too often we focus only on the doom-and-gloom of our industry. Let's take a moment to recognize how our efforts have made a difference in avoiding or minimizing the risks of cyber losses.

Please click the Like button if you found this insightful

Should cybersecurity be everyone's responsibility? I talk with Masha Sedova - Co-Founder & President of Elevate Security to discuss the benefits, challenges, and pitfalls of placing responsibility on employees.

This topic originated from a #cybersecu

Cybersecurity is one of the most important—and least talked-about—business issues today. But how can you prepare your organization against the threat of a devastating attack?

In my new LinkedIn Learning class, I discuss the five biggest mistakes made

I am looking forward to the upcoming 2022 Silicon Valley CIO Executive Leadership Summit in Mountain View CA on Oct 27^th!  HMG Strategy always puts on a great event for CIOs, CEOs and CISOs.

I am on a panel, moderated by Mark Egan, with David Hahn, an

Technology can be mesmerizing. We are all lured by the seemingly endlessly tantalizing stream of emerging technologies that promise to connect and enrich our lives. But there is a potential dark side. For every great innovative benefit, there are acc

I recently presented to a small group on why cybersecurity is becoming more difficult over time, despite all the money and effort that is being applied. Sharing a replay of the presentation where I discuss cybersecurity history, root causes, shifting

A question to my colleagues who are Zero Trust experts: are there standards that have emerged to help guide Zero Trust deployments to implement consistent architecture choices or designs that meet specific levels of risk mitigation? 

For example, I w

Ransomware is a growing problem that must be STOPPED! Cybercriminals are accumulating fortunes by impacting individuals, businesses, critical systems, and digital services. Some victims are paying ransoms in the tens of millions of dollars.

In today’

Where should a CISO report into within an organization?  No common standard exists as we can find them operating under many different organizations, including IT, Legal, the CTO, and CEO just to name a few. 

In today’s video, I break down some of the

On 2nd July 2013, National Cyber Security Poilicy has been released. First point in the preamble is an eye opener. It says " Cyberspace is a complex environment consisting of interactions between people, software and services supported by worldwide d

Technical Skills:

Major Areas Of Focus:

• Incident Response
• Computer Forensics
• Network Security
• Secure Architecture

( Read More: CISO Platform Top IT Security Influencers (Part 1) )

Conceptual (Understand How-It-Works):

• Fundamental security conce

Watch Talk:

(Read more:  5 Best Practices to secure your Big Data Implementation)

BadUSB — On accessories that turn evil by Karsten Nohl

Karsten Nohl is a cryptographer and security researcher

This talk introduces a new form of malware that oper