Switching from holistic change management to targeted control monitoring. As an example, map ISO 27001-27002 to policies, policies to technical standards, and standards to control-sets. Then scan for and alert when the controls change.
Watch more videos on my YouTube channel.
The importance of change management, and why few can pull it off.
Watch more videos on my YouTube channel.
Corrections to Friday’s Hospital video and a shout out to the Society of Information Risk Analysts (http://ift.tt/1BjbwLx). We need to take care to prioritize our efforts on what is likely and impactful, not what is scary and sensational.
Watch more videos on my YouTube channel.
Hospitals spend less, as a percentage of revenue, on IT. They spend less, as a percentage of the IT budget, on security. And they deal with legacy equipment and fragile systems. What could possibly go wrong?
Watch more videos on my YouTube channel.
Pilot projects are like comedy jams. Even the bad ones are worthwhile, and it only takes a couple good ones to be a success. But pilots are only one of three mindsets a successful security function needs.
Watch more videos on my YouTube channel.
Security leadership. Using the home field advantage to accelerate our colleagues and expand our line-of-sight. Done consistently, this strengthens our relationships while giving us oxygen to tackle new vulnerabilities and threats.
Watch more videos on my YouTube channel.
A recent SQL injection led to the loss of kids photos and addresses. Analysis of the attack path on the VTech breach, with suggestions for controls.
Watch more videos on my YouTube channel.