CISOs are typically not the owner of their organization's most critical (or even non-critical) assets and data. There are usually business unit leaders assigned to that, and the CISO's role is to help reduce the risk to those assets. If the CISO does have direct access to those assets, it's a bad architectural design. That's today's #CyberSunday topic. Want to reach out to the host? Email us at [email protected] Hosted By: Michael Farnum Editing By: Lauren Lynch Keep up with HOU.SEC....

Security conferences and events are often built with a certain audience in mind. Some are for a a general audience, and others are focused on the CISO. But if an event has a focus on the CISO, it should be for a good reason. I discuss some of those reasons in today's #CyberSunday. Things Mentioned: https://www.linkedin.com/posts/kane-n_its-sad-to-see-many-security-events-these-activity-7209360322237800448-eiiE?utm_source=share&utm_medium=member_desktophttps://www.execseccon.com/Wan...

Does practice make perfect? Probably not perfect, but it does make you better. That also applies when performing tabletop exercises. But is it feasible to practice as much as you SHOULD when everyone has other jobs to do? That's what Michael is talking about in today's #CyberSunday. Things Mentioned: · Peter Sacawaker’s LinkedIn Post - https://www.linkedin.com/feed/update/urn:li:activity:7207171692832432128/ · Clint Bodungen’s tabletop company - https:/...

In mentorship, it's often thought that the mentor is doing the teaching and the mentee is doing the learning. But mentors should also be open to and seek out lessons that they can take from the mentee. In this #CyberSunday, I talk about how tenured #cybersecurity professionals can learn about new tech and new concepts from those who are newer to the field but have other experiences. Things Mentioned: HSC User Group - https://www.hscusergroup.com/Want to reach out to the host? Email us at podc...

The 2024 RSA Security Conference is here. While I am not going this year, I do want to give a few professional networking pointers for folks who are going, especially if you are a new conference attendee. These conference habits have helped me in my professional career, and I hope they help you as well. #CyberSunday #RSA2024 #securityconference #cybersecurity A quick note... I am talking about "professional networking" advice in this video, but I mentioned Jennifer Leggio's article in Secur...

Attack vectors and methods tend to by cyclical, meaning attackers will come back to see if old tricks will yield new results. I talk about one such attack vector that might be coming back in style... with a slight twist. Want to reach out to the host? Email us at [email protected] Hosted By: Michael Farnum Editing By: Lauren Lynch Keep up with HOU.SEC.CON · LinkedIn · Twitter · Facebook · Instagram Check o...

SIEM (Security Incident and Event Management) has been a round a long time. But there are some recent trends and new vendors that are creating fresh ways to implement and operationalize SIEM. I'm discussing a couple of the larger SIEM and security operations trends on today's #CyberSunday. Want to reach out to the host? Email us at [email protected] Hosted By: Michael Farnum Editing By: Lauren Lynch Keep up with HOU.SEC.CON · LinkedIn · Tw...

How can you tell if a new #cybersecurity concept (think Zero Trust) in cybersecurity is a just a flash in the pan or a valuable idea that can be utilized in your program? In this #CyberSunday, I talk about an unusual method for being able to potentially tell the difference. Want to reach out to the host? Email us at [email protected] Hosted By: Michael Farnum Editing By: Lauren Lynch Keep up with HOU.SEC.CON · LinkedIn · Twi...

There is a lot of fear of the security implications about AI and other new and/or improved technologies. And while some fear is healthy, we also can't let it keep us from thinking about uses for that same tech to improve security. Let's talk about it in this #CyberSunday. Want to reach out to the host? Email us at [email protected] Hosted By: Michael Farnum Editing By: Lauren Lynch Keep up with HOU.SEC.CON · LinkedIn · Twitter · &nb...

Michael talked about security control monitoring a few weeks ago. In this #CyberSunday, he is digging in a bit around an essential part of control monitoring: configuration management/monitoring. What is config management/monitoring, what do you need to do before you can even start monitoring and managing configs, etc. Want to reach out to the host? Email us at [email protected] Hosted By: Michael Farnum Editing By: Lauren Lynch Keep up with HOU.SEC.CON ·&nbs...