Threat Hunting Needs Technology and People

Dateline: July 14, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Continuing on our theme of the organizational side of cybersecurity leadership, this week we look at threat hunting.  A blog titled Threat Hunting and the Pyramid of Pain (written by flOx2208, a "common human being wanting to share my knowledge and experience") suggests that … [Read more...]

Cybersecurity Basics

Dateline: July 7, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Next week I'm leading a session on building a cybersecurity culture at of the annual meeting of the Cybersecurity Consortium at MIT's Sloan School (Full disclosure: I am the Executive Director of the Consortium, you can learn more about (IC)3 activities and membership here).   In … [Read more...]

Changing Corporate Perception of Cybersecurity

Dateline: June 30, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. This past week a new ransomware cyber threat made its way through hundreds of computers.  While not surprising that another attack was launched, what was surprising is that NotPetya exploited the same vulnerability as WannaCry just a few weeks earlier.  It was successful because … [Read more...]

Cybersecurity is Not Just a Technical Problem

Dateline: June 23, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Getting our hands around cybersecurity is a top priority for many executives.  CIOs and CISOs understand cybersecurity is more than a technical problem to solve.  Other C-suite executives are quickly coming up to speed, understanding that being cyber-resiliant is the … [Read more...]

Strategic Cybersecurity Plans

Dateline: June 16, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Building a culture of cybersecurity is one tool available to senior leaders who want to make their organizations more secure.  In a recent article, cybersecurity expert Adam Meyer, Chief Security Strategist at SurfWatch Labs, makes a case for strategic cyber threat intelligence … [Read more...]

The Need for a Culture of Cybersecurity

Dateline: June 9, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. In the wake of the WannaCry ransomware attack, there have been many expert opinions on what, why and how this happened.  A recent article by security expert Jennifer Blatnik, published at SecurityWeek.com, titled The Impact of WannaCry on the Ransomware Conversation, … [Read more...]

IoT: Internet of Threats?

Dateline: June 2, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. For several years now, as the Internet of Things (IoT) connects many of our seemingly harmless devices to the web in order to add features and functionality, cybersecurity professionals have  pointed out how much more vulnerable to attacks we have become.  No one makes this point … [Read more...]

The Widening Cybersecurity Workforce Gap

Dateline: May 26, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Cybersecurity concerns always increase when there is a widely publicized event such as the WannaCry ransomware attack a week or so ago.  But according to a recent article, published by SecurityIntellignece.com,  the cybersecurity workforce needed to help us protect our … [Read more...]

Cloud May Not Be the Solution for Cyber Security Concerns

Dateline: May 19, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. For the past few weeks, we've shared startling statistics published in a blog at Information Week titled, Nearly 90% of organizations victim of data breaches.   Many managers believe their security concerns are eliminated if they move to the cloud, because cloud providers will make … [Read more...]

Cyber Attack Statistics Startling, Part 2

Dateline: May 12, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Last week we blogged about startling statistics published in a blog at Information Week titled, Nearly 90% of organizations victim of data breaches.  This week we share additional statistics from the study done by Bitglass and CyberEdge Group, who administered a survey to the … [Read more...]