The Perilous Role of the CISO: Navigating Modern Minefields

June 19, 2024 at 07:21AM The CISO faces mounting pressures in our digital age. They grapple with regulatory challenges, constantly evolving threat landscapes, and limited decision-making authority. However, there’s a strategic evolution in play, with CISOs increasingly reporting to CEOs and aspiring to align security objectives with broader business goals. Despite the risks, the CISO … Read more

Your Cybersecurity Budget Is a Horse’s Rear End

January 12, 2024 at 10:14AM The design of the space shuttle and cybersecurity budgets are compared to the size of a horse’s hindquarters, suggesting that budget limitations are based on past budgets and may not adequately address current challenges. The article encourages a realistic assessment of cybersecurity programs and consideration of reengineering budget processes. Based … Read more

Continuity in Chaos: Applying Time-Tested Incident Response to Modern Cybersecurity

January 9, 2024 at 10:12AM At Blackhat 2004, the founder of Red Cliff Consulting presented on “The Evolution of Incident Response,” addressing challenges like increasing attack complexity, evolving response methodologies, and the need for pre-incident preparation. Despite technological advancements, core incident response principles remain the same. Issues like email, patching, and human error persist. Three … Read more

Biden Wants to Move Fast on AI Safeguards and Will Sign an Executive Order to Address His Concerns

October 30, 2023 at 07:39AM President Joe Biden will sign an executive order aimed at shaping the development of artificial intelligence (AI) in the United States. The order will require the industry to establish safety and security standards, introduce consumer protections, and give federal agencies oversight of the technology. It reflects Biden’s belief that the … Read more