Trending Tags
Latest Articles
-
What Actually Counts as Evidence of Cybersecurity Skill?
Read More: What Actually Counts as Evidence of Cybersecurity Skill?Sooner or later, someone who is thinking about hiring you is going to say, “Okay, I believe you know cybersecurity. Show me what you can do.” A lot of…
-
What Makes a Cybersecurity Risk Decision Defensible?
Read More: What Makes a Cybersecurity Risk Decision Defensible?A year from now, somebody is going to look at a risk your organization chose to live with and ask a simple question: why did we decide that? Most…
-
Who Decides During a Security Incident? A CISSP-Level View of Incident Management
Read More: Who Decides During a Security Incident? A CISSP-Level View of Incident ManagementPicture your monitoring picking up something early in the workday, and the analysts agree it looks real. The technical team already knows what they would like to do about…
-
SOC vs GRC: Which Would You Actually Want to Do All Day?
Read More: SOC vs GRC: Which Would You Actually Want to Do All Day?If you are trying to choose between SOC and GRC, you have probably already compared salary, difficulty, and which one sounds more technical. Those comparisons feel useful, and they…
-
Your Team Can Detect Incidents. Can It Manage Them?
Read More: Your Team Can Detect Incidents. Can It Manage Them?Your monitoring tools just flagged something. Now somebody has to decide how serious it is, who needs to know, and who is actually in charge of the response. If…
-
I’m 44. I’ve Been in IT Since 2000. I’m Building Something New.
Read More: I’m 44. I’ve Been in IT Since 2000. I’m Building Something New.I’m 44 years old, and I’ve been working in IT since 2000. Weirdly enough, I feel like I’m starting over a little bit. My career hasn’t changed. I’m still…
-
Failed Logins, Then a Successful One: How to Investigate a SIEM Alert
Read More: Failed Logins, Then a Successful One: How to Investigate a SIEM AlertYour SIEM flags an account. About a dozen failed logins in a few minutes, then a successful one. It looks like someone guessed a password and got in. Maybe…
-
Your Risk Register Has 200 Risks. Who Actually Owns Them?
Read More: Your Risk Register Has 200 Risks. Who Actually Owns Them?Picture a risk register with a couple hundred items in it: vulnerabilities, audit findings, vendor issues, control gaps, and a few risks somebody accepted a while back. Now look…
-
Your Vendor Just Got Breached. Here’s How a CISSP Should Actually Think It Through.
Read More: Your Vendor Just Got Breached. Here’s How a CISSP Should Actually Think It Through.Your organization’s biggest data vendor just called. They think, but aren’t fully sure yet, that some of your data went out the door in a breach on their side.…
-
You’re Already Doing Security Work. You Just Don’t Have the Title.
Read More: You’re Already Doing Security Work. You Just Don’t Have the Title.If your job title doesn’t have the word security in it, you’ve probably looked at a security job posting and thought, “I don’t have any of this.” If you’ve…
Categories
Tags
Professor Simon’s Picks
