For those looking to grow into leadership or their leadership level, sharing a helpful framework for you. Many will experience, or at least recognize, the Five-Level of Leadership, as described by John Maxwell in his book by the same name. Other speakers/leaders have described similar frameworks. As we discuss the…

In part three of this series, we discussed the puzzle pieces that make up a potential cybersecurity program and that depending on the size and scale of the organization, the puzzle pieces might come in different shapes and sizes; some might also lay in the areas of responsibility of other…

In part two of this series, we discuss looking at developing your cybersecurity program from the current state assessment to creating strategic projects to get them started. However, without knowing all the pieces to the cybersecurity program puzzle, you could be missing that critical piece and not even realize it. …

In Part One of this series, we discussed meeting the stakeholders of your new program. This part of the series “Developing your Security Program” will discuss the approach to take as you develop your program. The below image describes a great approach to strategically developing your security program. This method…

I was recently recommended the book “The New One Minute Manager,” and the book ended with asking, “if you found the advice in the 3 Secrets given by the New One Minute Manager helpful, share it with others.” I am deciding to do just that by sharing this review. Many…

A CISO entering a new organization faces the challenge of assessing and creating/modifying a security program based on the current and future states of the company’s mission. Creating an information security program for an organization is not an easy task; each program needs tailoring to implement the organization’s mission. …

Having completed the AttackIQ Academy Live “Building Threat-Informed Emulation Plans” course, I wanted to share a high-level approach to Threat-Informed Defense which allows organizations to prioritize better defenses based on their threat landscape. A threat-informed defense enables an organization to have prioritized protection and understanding of the threat actors of…

The Hiring Village at BSidesCharm 2022 has a great mix of small and large firms, some local to the conference’s home city of Baltimore; others nationally recognized names. I wanted to try something different this time; rather than have the companies ask me about myself or what I am looking…

Having wrapped up the week at an onsite conference, I wanted to share some reflections from the Cyber Future Foundations Cyber Talent Week (https://cyberfuturefoundation.org/ctw2022.html). Thinking about the challenges we have in tackling the demand for cybersecurity talent to fill some of the millions of unfilled jobs, some focus areas emerged…