Page 2 - Expert Insights

Leadership & Executive Communication

The Troublemaker CISO: Get the Organizational Basics Right

CyberEdBoard • July 25, 2022

Getting cybersecurity right means CISOs need peer relationships with other operations executives. CISOs need board access and a handle on the company business, writes Ian Keller, director of security at a telecom company. "And then you'll wake up and realize this is not as simple as it sounds."

Leadership & Executive Communication

'Strategy Follows People' - How to Keep Both of Them

CyberEdBoard • June 9, 2022

In an organization, people are the ones who develop and sustain organizational strategy. Talented people are discovering that it's possible to leave a toxic environment so they can breathe and thrive. Marco Túlio Moraes explores how to retain both talent and strategy.

Access Management

Book Excerpt: Building an Effective Defense

CyberEdBoard • June 7, 2022

Michael Lines is working with ISMG to promote awareness of the need for cyber risk management, and the CyberEdBoard is posting draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This chapter - the last in the series - is titled "Building an Effective Defense."

3rd Party Risk Management

The Troublemaker CISO: Supply Chains and Disclosure

CyberEdBoard • May 12, 2022

In the latest "Troublemaker CISO" post, security director Ian Keller discusses the issue of supply chain security and whether you should disclose information about your supply chain to companies as part of the effort to secure it. His conclusion: Build your defenses and trust no one.

Leadership & Executive Communication

Why Digital Transformation Is Incomplete Without SASE

CyberEdBoard • May 9, 2022

CyberEdBoard executive member Archie Jackson says security needs to be embedded by design at the inception of a project. He discusses how SASE is networking plus security plus identity and outlines how Network as a Service and Network Security as a Service combine to create SASE.

Application Security

Book Excerpt: Recognize Their Attacks

CyberEdBoard • April 27, 2022

Michael Lines is working with ISMG to promote awareness of the need for cyber risk management, and the CyberEdBoard is posting draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This chapter is titled "Recognize Their Attacks."

Business Continuity Management / Disaster Recovery

Getting Away From the Bear in the Forest

CyberEdBoard • April 21, 2022

Marco Túlio Moraes of OITI, who is a CyberEdBoard executive member, confronts the metaphor of the cyberthreat as a bear in the forest and discusses how an organization must actively assess its environment, understand what its main risks are, and define a strategy to deal with them.

Security Information & Event Management (SIEM)

The Top 5 Security Orchestration Myths

CyberEdBoard • April 20, 2022

Security orchestration, or SOAR - Security Orchestration, Automation and Response, as it is known to some - is still an area in development, so there are misconceptions about its scope of use and effectiveness for a SOC team. Claudio Benavente discusses the top five security orchestration myths.

Application Security

The Troublemaker CISO: Killware

CyberEdBoard • March 29, 2022

In the latest "Troublemaker CISO" post, security director Ian Keller discusses killware - "a hack of critical services and or infrastructure that can lead to the loss of life" - and asks: "Why should the power grid - or hospitals, water treatment plants or your pacemaker - be internet-accessible?

Leadership & Executive Communication

Recognize the Threats, Part 2 - Book Excerpt

CyberEdBoard • March 18, 2022

Michael Lines is working with ISMG to promote awareness of the need for cyber risk management. As a part of that initiative, CyberEdBoard posts draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This chapter is "Recognize the Threats."

Leadership & Executive Communication

Adding Cybersecurity to the Curriculum

CyberEdBoard • March 16, 2022

We look at cybersecurity largely focused on the immediate future. But educator Gary Henderson says we need to look a little further ahead. He makes the case for educating teachers about cybersecurity so they can educate their students, who can then go on to use those best practices in their careers.

Leadership & Executive Communication

The Fifth Option in Risk Treatment

CyberEdBoard • March 9, 2022

In an excerpt from his book "CRISC Certified in Risk and Information Systems Control All-In-One Exam Guide," Peter Gregory discusses choosing the fifth option in risk management, which is ignoring the risk. He warns of the problems that choice can cause.

3rd Party Risk Management

The Troublemaker CISO: Cloud Isn't Easy

CyberEdBoard • February 15, 2022

People think cloud is a silver bullet, but it’s not. It's not even copper. And people think cloud it easy and someone else’s problem. But it's not. The cloud is nothing more than a highly resilient, outsourced data center with a lot of bells and whistles.

Business Continuity Management / Disaster Recovery

Book Excerpt: Recognize the Threats

CyberEdBoard • January 21, 2022

Michael Lines is working with ISMG to promote awareness of the need for cyber risk management. As a part of that initiative, CyberEdBoard posts draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This chapter is "Recognize the Threats."

Cybercrime

Know Your Enemy: Who Are You Protecting Yourself From?

CyberEdBoard • December 22, 2021

Michael Lines is working with Information Security Media Group to promote awareness of the need for cyber risk management, and as a part of that initiative, the CyberEdBoard will post draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This post's chapter is...