- CISO Series Newsletter
- Posts
- Are You Asking “How Secure Are We?” or “How Insecure Am I?”
Are You Asking “How Secure Are We?” or “How Insecure Am I?”
Are You Asking “How Secure Are We?” or “How Insecure Am I?”
CISO/Security Vendor Relationship Podcast
Are You Asking “How Secure Are We?” or “How Insecure Am I?”
Andy Ellis and I welcome guest Kevin Morrison, CISO, Alaska Air to discuss:
How do you answer the question, "Are we secure?"
Red flag-level bad security: Run away or offer to help?
How necessary is it to know patterns of where and how criminals are going to attack?
How to manage the risk of onboarding entry level cybersecurity personnel who lack prior job experience?
Thanks to our podcast sponsor, Enso.
Overheard on CISO/Security Vendor Relationship Podcast
“I hate the ‘blame the user’ model of phishing tests. Phishing tests are to inform you about how bad your email infrastructure actually is. The user is just one piece of it.” - Andy Ellis, operating partner, YL Ventures
Listen to full episode of "
."
Cyber Security Headlines
Top headlines for Tuesday, August 31, 2021:
Microsoft might not provide security updates for manual Windows 11 installs
Deepfakes as a service?
Bumble app vulnerability reveals exact location
to this episode.
or subscribe to the daily newsletter.
Thanks to this week's headlines sponsor, Semperis.
There is no Video Chat this Friday [09-03-21], but join us on Friday [09-10-21] for "Hacking Alert Fatigue"
There is no CISO Series Video Chat this Friday due to the Labor Day weekend, but join us the following Friday when our discussion will be
"Hacking Alert Fatigue: How to Manage What Seems to Be Unmanageable."
It all begins at 10 AM PT/1 PM ET on Friday, September 10, 2021 with guests Sandy Bird, co-founder and CTO, Sonrai Security, and Shawn M Bowen, CISO, World Fuel Services. We'll have fun conversation and games, plus at the end of the hour (11 AM PT/2 PM ET) we'll do our meetup (AKA "cybersecurity speed dating").
Thanks to our video chat sponsor, Sonrai Security.
Overheard on Defense in Depth
“If you separate the initial access from the actual ransomwaring of the environment, you can make a lot more progress on the attack chain and you can think about defense in depth a lot more productively.” - Ryan Kalember, evp, cybersecurity strategy, Proofpoint
Listen to full episode of "
."