All of Your Compliance Needs with One Methodology
Comprehensive methodology for streamlining compliance processes across multiple frameworks, enhancing efficiency and reducing redundancy in organizational security practices.
Adopting a Risk-Based Threat Model to Secure Your Defenses and Regain Control of Your Critical Data
Adopt a risk-based threat model to enhance defense strategies and regain control of critical data, improving overall security posture and resilience against cyber threats.
Seeing Purple - Hybrid Security Teams for the Enterprise
Explore hybrid security teams for enterprises, covering red teaming, blue teaming, and purple teaming strategies to enhance threat detection and response capabilities.
Exercising with Threat Models
Explore practical threat modeling techniques to enhance cybersecurity strategies and identify potential vulnerabilities in systems and networks.
How to Budget IDSs
Learn effective IDS budgeting strategies, from basic layouts to triaging alerts and optimizing security spending. Discover practical steps for improving network defense within financial constraints.
Supply and Demand - Solving the InfoSec Talent Shortage
Explore strategies to address the InfoSec talent shortage, including outsourcing, investing in the next generation, and creating internship opportunities for aspiring cybersecurity professionals.
User Behavior Analysis
Explore user behavior analysis techniques for offensive security, focusing on identifying vulnerabilities and potential attack vectors in human interactions with systems.
Do We Still Need Pen Testing - Jeff Mann
Explore the relevance and goals of penetration testing in modern cybersecurity, examining its effectiveness, methodologies, and evolving role in protecting digital assets.
Evaluating Commercial Cyber Threat Intelligence
Explore methods for assessing and leveraging commercial cyber threat intelligence to enhance organizational security posture and decision-making processes.
Mitigating Brand Damage From a Cyber Attack
Learn strategies to protect your brand during cyber attacks, including monitoring, communication, and decision-making to minimize reputational damage and maintain stakeholder trust.
Cyber Security Awareness for Healthcare Professionals
Explore cybersecurity essentials for healthcare professionals, covering real-world incidents and best practices to protect sensitive patient data and medical systems.
Data Breach - If You're Not Prepared, You Can't Be Responsive
Learn strategies for data breach prevention, mitigation, and response planning. Discover key steps for the first 24-70 hours post-breach, including internal communications, investigations, and remediation.
Ten Practical Ideas for Creating an Attentive and Supportive Organization
Practical strategies for fostering an attentive and supportive organizational culture in sales and marketing, emphasizing awareness, engagement, and continuous improvement.
Presenting Security Metrics to the Board
Learn effective strategies for presenting security metrics to executive boards, focusing on clear communication, risk quantification, and tailoring your approach to board expectations.
Strengthening Your Security Program
Enhance your security program with log analytics, intelligence, and strategic planning. Learn to build relationships and allocate training budgets effectively.
Exploring the Relationship between Compliance and Risk Management
Explore the interconnection between compliance and risk management in information security, focusing on strategies to align regulatory requirements with effective risk mitigation practices.
Were At War - Why Aren't You Wearing A Helmet
Explore cybersecurity challenges and strategies in today's digital landscape, emphasizing the critical need for proactive defense measures and heightened awareness in information security.
Security Talent in Ohio - A Discussion
Explore Ohio's cybersecurity talent landscape, addressing challenges and strategies for workforce development, recruitment, and retention in the information security industry.
Ascending Everest - Managing Third Party Risk in the Modern Enterprise
Explore strategies for managing third-party risk in modern enterprises, drawing parallels with ascending Mount Everest to illustrate challenges and solutions in IT security.
Building an Industrial Controls Cybersecurity Framework - Critical Infrastructure
Explore building a cybersecurity framework for industrial controls in critical infrastructure, covering key concepts, standards, and executive orders.
Compliance vs Security - How to Build a Secure Compliance Program
Explore building a secure compliance program, balancing regulatory requirements with effective security measures. Learn from real-world breaches and gain practical insights for program development.