Stories

Stories

Nov 22, 2021

Business Leaders Need to Own Cyber Security

Corporate cybersecurity requires a business leader to make the decisions, be personally invested, and lead the security work the same way as the business. The intent and guidance of the business leaders need to be visible. That's not always the case. Some perspective from Dr. Jan Kalberg of the US Army Cyber Institute at West Point. (The views expressed here are his, not necessarily those of the Army Cyber Institute.)

Story

Nov 15, 2021

Introducing the Rick-the-Toolman series: The MITRE ATT&CK framework.

If you’ve been reading any of my essays of the last year or so, you know that I'm a huge fan of the Lockheed Martin Intrusion Kill Chain model. The ideas that emerged from the original 2010 paper revolutionized cybersecurity thinking. Because of that, I incorporated the key points from that paper into my cybersecurity first principles strategy. As security executives, we all should be asking pointed questions to our infosec teams about how our internal security posture is configured against known adversary behavior.

CSO Perspectives

Nov 1, 2021

Introducing the cyberspace sand table series: The DNC compromise.

When I was a young captain in the U.S. Army, I was the signal officer for a field artillery battalion at Fort Polk, Louisiana. That’s the same Fort Polk that the Army created back in the early 1940s to train its famous commanders (Eisenhower, Clark, Bradley and Patton) and the soldiers that served them, to get ready for WWII. Camp Polk, as it was known back then, was a real-life physical training environment where military units could actually maneuver on the ground, make mistakes, and make adjustments to correct those mistakes, before the bullets started flying for real in Europe.

CSO Perspectives

Oct 29, 2021

How to grow interest in STEM and create women and minority leaders.

There is a grave disconnect in the US labor force that will adversely impact the future of the science, technology, engineering and mathematics (STEM) industries. According to the US Census Bureau, men make up slightly over half of the US workforce—52%—yet they comprise 73% of all STEM workers.

Story

Oct 18, 2021

First Principle Series: Compliance?

At some point in my professional career, the main thing I did in order to do my job was travel. It wasn’t onerous: out on Monday and home by Friday (usually). Two or three times a year, though, I did travel overseas. Once, when I was still a newbie at this corporate travel thing, I was supposed to travel to São Paulo, Brazil, to keynote a security conference. The night before my scheduled departure, I confirmed my flight arrangements, hotel, and rental car, and I triple-checked that I had my passport handy. When I arrived at the airport the next morning, the airline clerk asked to see my Brazilian visa. I had some experience traveling internationally but nobody had ever asked me about a visa before. Blanky, I responded with “My Brazilian what what?” And apparently, the only way to get a Brazilian visa at the time was to wander down to the Brazilian Embassy in Washington DC, stand in line for a few hours, and pay a fee.

CSO Perspectives

Oct 5, 2021

Microsoft Security’s Afternoon Cyber Tea Podcast with Ann Johnson joins the CyberWire Network

The CyberWire announced today that Microsoft Security’s popular, long-running podcast, “Afternoon Cyber Tea with Ann Johnson,” is joining the rapidly growing CyberWire Podcast Network. Ann Johnson, Corporate Vice President, Business Development, Security, Compliance & Identity at Microsoft, talks with cybersecurity thought leaders and influential industry experts about the trends shaping the cyber landscape and what should be top-of-mind for the C-suite and other key decision makers. Ann and her guests explore the risk and promise of tools and systems powered by AI, IoT, machine learning, and other emerging technology, as well as the impact on how humans work, communicate, consume information, and live in this era of digital transformation.

Story

Load More