One of the most sacred responsibilities of all cybersecurity professionals is protecting information. Corporate financials, client information, sales records, and product designs are all critical to an organization’s success. Each firewall, IDS, MFA, and email security is built to protect and stop cyber attacks. Cybercriminals are always looking for new…

Can you have security without privacy? Sitting at a train station in Shanghai, China, in February 2019, visiting family for the Chinese new year. My wife approached a man asking if we were interested in buying his train ticket to Beijing. …

Living through a cybersecurity breach is far more educational than education itself. CEO: “Please, we are down again! Let me guess the hacker from some village in the Congo?” CIO: “We are currently researching a root-cause analysis. All hands on deck!” CISO:” Our security operations processes and procedures worked as expected.” Dir of IT: “Are we sure it is not the same…

From The Other Side Of The PO Blog: Part 4 CEO: “ Due to complications in the market with unexpected changes in product and customer spending, we are going to announce a 20% in headcount, expenses, and capital projects for the remainder of the year.” CIO: “Does that include all of my departments and platforms?” CEO: “Yes, if the demand…

“Chief Hacking Officer: Yevi, where are you at with London bank hack?” “Yevi, I think we are okay; we should have something by Friday.” “Chief Hacking Officer: What? You committed that hack two weeks ago!” “Yevi, yea, well, I hope it will be okay. Security kinda tough get inside.” “Chief…

Why do the CFO(Chief financial officer), COO(Chief operating officer, CIO(Chief information officer), and CRO(Chief risk officer) need to report to CISO(Chief information security officer), not the other way around? “CEO: People: Are we ready for the launch?” “CRO: Absolutely, we should see a bump of 35% in sales in the…

At The Corner Of Cyber And Blog Should Being Hacked Lead To A Termination Of Employment? “What happened, people?” “Sir, we got hacked again through the firewall. Somehow they found a vulnerability.” “What, are you kidding me. How much do we play that managed service provider you recommended!!” “Sir, there are anytime more vulnerabilities than solutions.” “What…

Pen-tester, Vulnerability Scanning, Risk Management, and Threat Modeling should be one engagement. — Pen-tester, Vulnerability Scanning, Risk Management, and Threat Modeling should be one engagement. In 2020, a group of threat modeling practitioners, researchers, and authors wrote the Threat Modeling Manifesto. The manifesto contains values and principles connected to the practice and adoption of threat modeling:

Has Security Become A Greater Priority Than A Product Launch? “Look, people, we need to get this product out now.” “Sir, we haven’t finished pen-testing the latest beta code.” “Pen-test? We don’t have time to practice our writing skills; we need this out now. I promised the board and our…