modernciso.com | Fresh Thinking for the Modern CISO

Requirements to Action: Cyber Threat Intelligence

“Military intelligence” is no oxymoron. I'm not a career intelligence professional, but I have worked with some of the best intel organizations and operations in the world, including cyber operations and U.S. military intelligence. So, when I need to assess cyber...

A CISOs Guide to Board Communications

Cybersecurity incidents are increasing, and with it, the pressure on CISOs to get cybersecurity right. At the heart of this challenge is getting the full support of the board of directors. The board sets the tone for the organization, gives the green light for...

The Business Case for Resilient IoT Security – Review of New Research

New research by the Ponemon Institute and IBM on IoT makes a compelling business case for IoT security. That said, there are some

Black Hat USA 2018 Presentation Picks

As Black Hat continues to draw closer we wanted to take a moment to highlight some talks that we are excited about. There is a lot of great content, so picking just a few was difficult, but these are the presentations that I and some of my colleagues are looking...

How Face-to-Face Security Awareness Can Prevent Information Leaks – a Pentester’s Experience

In August 2008, the DEFCON security conference held its 16th session in the Riviera hotel in Las Vegas, Nevada. Among the litany of brilliant talks on computer security was a 30-minute presentation by Renderman on the topic of attacking client computers rather than...

To AI or Not to AI? That Is the Question – Or Is It?

Artificial intelligence (AI) is being discussed quite a bit, in fact, maybe the term is used too much. After all, it means different things in different situations, and vendors are using the term particularly loosely to tie into a hot market and hopefully sell more...

Operational Technology: The Next Cyber Battlefront

Critical infrastructure sectors are vital to the functioning of modern societies and are vulnerable to damage from natural disasters, and physical incidents. However, ever since its consolidation with IT networks, Operational Technology (OT) threat landscape has...

Penetration Testing: Stories from the Trenches, Lessons Learned

Last year, my colleague Fabrice wrote about the benefits and challenges of penetration testing to businesses’ security. I decided to revisit the subject and provide more insight as a practicing security engineer. An opportunity to compile a security checklist...

Fresh Thinking for the Modern CISO

You have Successfully Subscribed!