HomePodcastDefense in Depth

Defense in Depth

DEFENSE IN DEPTH

Defense in Depth: Onboarding Cyber Professionals with No Experience

You want to bring on entry level personnel, But green employees, who are not well versed in security, IT, or your data, introduce risk...

Defense in Depth: Where’s the Trust in Zero Trust?

Zero trust is a hollow buzzword. In any form of security, there exist critical points where we have to trust. What we need is...

Defense in Depth: Who Investigates Cyber Solutions?

Cyber professionals, who is responsible on your team for investigating new solutions? Check out this post and this post for the discussion that are the basis...

Does the Cybersecurity Industry Suck?

In the cyber industry we pat each other on the back and give each other awards, all while the statistics for breaches appear to...

Defense in Depth: Are We Taking Zero Trust Too Far?

For some, the definition of zero trust has expanded from how we grant access to networks, applications, and data to how we trust individuals...

Defense in Depth: Is Shift Left Working?

Developers and security professionals have been heavily sold on the concept of "shift left" or deal with security issues early in development rather bolting...

Defense in Depth: Technical vs. Compliance Professionals

Do we have a Monitgue/Capulet rivalry between technical and compliance professionals? Why is this happening, and what can be done to improve it? Does...

Defense in Depth: Why Do So Many Cybersecurity Products Suck?

Why do we end up with so many bad security products? Who is to blame and how can we fight back an ecosystem that...

Defense in Depth: Training for a Cyber Disaster

What are you doing to prepare for the next cyber disaster? You must train for it, because when it happens, and it will happen,...

Defense in Depth: Virtual Patching

What if you didn't spend all your time patching vulnerabilities but instead created a security policy that prevented known vulnerabilities from being exploited. How...

Defense in Depth: Start a Cybersecurity Department from Scratch

A 500+ person company doesn't have a security department. They need one and they need to convince the CEO they need one. How do...

Defense in Depth: How to Think Like a Cybercrook

"If you want to catch a cybercrook, you need to think like one." But how do you actually go about thinking like a cybercriminal?...

Defense in Depth: Building a Data-First Security Program

Could you build a data-first security program? What would you do if you focused your security program on just the asset? Check out this post for...

Defense in Depth: Offensive Security

Offensive security or "hacking back" has always been seen as either unethical or illegal. But now, we're seeing a resurgence in offensive security solutions....

Defense in Depth: When Vendors Pounce on New CISOs

A security professional announces a new position as CISO. As a vendor you see this as good timing to try a cold outreach to...