Trending Tags
Latest Articles
-
Your Vendor Gets Breached. Your Data Is Exposed.
Read More: Your Vendor Gets Breached. Your Data Is Exposed.Plenty of organizations get a lot right on their own network. They patch systems, tighten access, and run real monitoring, and still end up breached anyway, through a vendor…
-
Your Resume Lists Tools. I Want to Know What You Did With Them.
Read More: Your Resume Lists Tools. I Want to Know What You Did With Them.Open almost any cybersecurity resume and you’ll find the same section: a block of tool names. Splunk. Wireshark. Nessus. CrowdStrike. Active Directory. AWS. Kali Linux. It can look impressive…
-
The Work Doesn’t Stop When the Incident Does
Read More: The Work Doesn’t Stop When the Incident DoesAsk most people what incident response looks like, and you’ll get some version of the same image: an analyst hunched over a keyboard, actively tracking an attacker through the…
-
Should You Specialize Early in Your Cybersecurity Career?
Read More: Should You Specialize Early in Your Cybersecurity Career?If you’re new to cybersecurity, you’ve probably run into two pieces of advice that seem to cancel each other out. Pick a specialty early, because the field is too…
-
Before You Approve an AI Vendor, Ask These Questions
Read More: Before You Approve an AI Vendor, Ask These QuestionsThe questionnaire comes back clean. SOC 2 report attached, encryption at rest and in transit confirmed, access controls documented, MFA enforced. Every box that used to mean “this vendor…
-
You Got the Certification. Now What Can You Actually Show an Employer?
Read More: You Got the Certification. Now What Can You Actually Show an Employer?You did the hard part. You studied on nights and weekends, paid for the exam, walked in, and passed. You have the certificate to prove it. And now the…
-
You’re Already in IT. You May Be Closer to Cybersecurity Than You Think.
Read More: You’re Already in IT. You May Be Closer to Cybersecurity Than You Think.People considering a move from IT into cybersecurity tend to evaluate the jump by listing what they don’t have yet. No security job title. No dedicated security project on…
-
Your Vendor Passed Security Review. That Was Two Years Ago
Read More: Your Vendor Passed Security Review. That Was Two Years AgoYou ran a thorough security assessment before onboarding that vendor. You reviewed their SOC 2 report, evaluated their infrastructure, examined their data handling practices, and made a risk decision…
-
What Does a Vulnerability Management Analyst Actually Do All Day?
Read More: What Does a Vulnerability Management Analyst Actually Do All Day?If you think vulnerability management is mostly about running scans and reviewing reports, you’re going to be surprised by where the time actually goes. Scanning is only one part…
-
An AI Policy Isn’t an AI Governance Program
Read More: An AI Policy Isn’t an AI Governance ProgramOver the past eighteen months, I’ve watched organizations rush to respond to generative AI adoption by drafting acceptable-use policies. This makes sense as an initial reaction. Employees started using…
Categories
Tags
Professor Simon’s Picks
