Cybersecurity has a growing problem that will force an evolution in the industry — it must deliver more recognizable value! Cybersecurity must re-envision itself to both protect and become an active contributor to the overarching business goals. Embracing this transformation is crucial for long-term success in the ever-changing cybersecurity…

The new SEC Rules establish a framework that requires rapid disclosure of material cybersecurity incidents (4 days), companies will need to be able to explain their cybersecurity posture to manage risks, and for boards to describe their oversight and expertise for cybersecurity. This is a major leap forward for securing…

The US National Cybersecurity Strategy Implementation Plan fails to address ransomware. There is a real opportunity for the government to make significant progress in crushing the growing scourge of ransomware attacks which threaten businesses, individuals, and the range of Critical Infrastructures that all citizens rely upon. Although the 2023…

The recent HCA Healthcare data breach of 11 million patients’ data is shaping up to be another ugly incident where a company did not promptly communicate with its customers. HCA Healthcare is a large American healthcare services organization that covers 180 hospitals and over two thousand care centers across 20…

Check the calendar as Richard Stiennon and I discuss the forward-looking cybersecurity predictions for 2023 and beyond! With several decades of knowledge and experience between us, we take a pragmatic look into the crystal ball. Those who have an understanding of what is coming will have an advantage to…

There are many approaches to conduct a strategic cybersecurity risks assessment. This is one of my favorite ways, using a Threat Agent Risk Assessment (TARA) methodology. This paper was authored by Tim Casey, David Houlding, and I while we were at Intel. It showcases how to understand the origins of…

Ever wonder what kinds of things happen when good-intentioned people try to manage cybersecurity? Well, in this case, a High School in Illinois responded to a system error by resetting every student’s password and then communicating it to all the parents. But instead of creating a unique password for each…

Cybersecurity Meetup with Richard Stiennon and Matthew Rosenquist The hottest topic of 2023 — Artificial Intelligence. Richard Stiennon and I discuss the relevance and how Large Language Models (LLMs), like ChatGPT, are adding innovation to the use of AI in the cybersecurity domain.

In this Cybersecurity Vault episode, I talk with the legendary cybersecurity metrics maestro Wade Baker about the challenges of measuring what is important, manipulation through poor metrics, and where the cybersecurity industry is heading. Wade has been a thought-leader in wrangling cybersecurity data for decades, is the co-founder of…