Page 3 - Expert Insights

Application Security

The Troublemaker CISO: Killware

CyberEdBoard • March 29, 2022

In the latest "Troublemaker CISO" post, security director Ian Keller discusses killware - "a hack of critical services and or infrastructure that can lead to the loss of life" - and asks: "Why should the power grid - or hospitals, water treatment plants or your pacemaker - be internet-accessible?

Governance & Risk Management

Recognize the Threats, Part 2 - Book Excerpt

CyberEdBoard • March 18, 2022

Michael Lines is working with ISMG to promote awareness of the need for cyber risk management. As a part of that initiative, CyberEdBoard posts draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This chapter is "Recognize the Threats."

Governance & Risk Management

Adding Cybersecurity to the Curriculum

CyberEdBoard • March 16, 2022

We look at cybersecurity largely focused on the immediate future. But educator Gary Henderson says we need to look a little further ahead. He makes the case for educating teachers about cybersecurity so they can educate their students, who can then go on to use those best practices in their careers.

Governance & Risk Management

The Fifth Option in Risk Treatment

CyberEdBoard • March 9, 2022

In an excerpt from his book "CRISC Certified in Risk and Information Systems Control All-In-One Exam Guide," Peter Gregory discusses choosing the fifth option in risk management, which is ignoring the risk. He warns of the problems that choice can cause.

3rd Party Risk Management

The Troublemaker CISO: Cloud Isn't Easy

CyberEdBoard • February 15, 2022

People think cloud is a silver bullet, but it’s not. It's not even copper. And people think cloud it easy and someone else’s problem. But it's not. The cloud is nothing more than a highly resilient, outsourced data center with a lot of bells and whistles.

Leadership & Executive Communication

How to Lead When Your Superheroes Need a Superhero

CyberEdBoard • January 31, 2022

In the first of a planned series of articles looking at strategies that have helped her and her teams over the years to not just survive a stressful environment, but thrive in it, cybersecurity executive and CyberEdBoard executive member Kerissa Varma offers this: Be a human, not a terminator.

Business Continuity Management / Disaster Recovery

Book Excerpt: Recognize the Threats

CyberEdBoard • January 21, 2022

Michael Lines is working with ISMG to promote awareness of the need for cyber risk management. As a part of that initiative, CyberEdBoard posts draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This chapter is "Recognize the Threats."

Cybercrime

Know Your Enemy: Who Are You Protecting Yourself From?

CyberEdBoard • December 22, 2021

Michael Lines is working with Information Security Media Group to promote awareness of the need for cyber risk management, and as a part of that initiative, the CyberEdBoard will post draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself." This post's chapter is...

Cybercrime

'Clean Out Your Contact Lists' - Contact Data Can Be Toxic

CyberEdBoard • December 21, 2021

Cyber GRX senior director and CyberEdBoard executive member Peter Gregory discusses data everyone has that is an asset, but also a liability - your contact list - and how to decrease your chances of it turning toxic.

Endpoint Security

How to Save Money on Pen Testing - Part 2

CyberEdBoard • December 17, 2021

The findings from a penetration test can help you identify risks and gaps in your security controls. Charles Gillman offers tips to maximize the value of your next pen test and, in the process, deliver better results.

Governance & Risk Management

Troublemaker CISO: Penny-Wise, Pound-Foolish & Insider Risk

CyberEdBoard • December 1, 2021

The saying "Penny-wise, pound-foolish" is relevant when we talk to those friendly, knowledgeable finance people about ongoing employee screening due to the dreaded insider threat and the costs associated with it - which leads to us pulling out our hair in utter frustration. This rant is about that.

3rd Party Risk Management

Understand Your Business: What Are You Protecting?

CyberEdBoard • November 29, 2021

Michael Lines is working with Information Security Media Group to promote awareness of the need for cyber risk management, and as a part of that initiative, the CyberEdBoard will post draft chapters from his upcoming book, "Heuristic Risk Management: Be Aware, Get Prepared, Defend Yourself."

3rd Party Risk Management

How to Save Money on Pen Testing - Part 1

CyberEdBoard • November 24, 2021

The findings from a penetration test can help you identify risks and gaps in your security controls. Charles Gillman offers tips to maximize the value of your next pen test and, in the process, deliver better results.

COVID-19

The New Enterprise Risk Management Strategy

CyberEdBoard • November 11, 2021

CyberEdBoad excutive member Alan Ng of China Taiping Insurance, Singapore, explains the enterprise risk management strategy for the pandemic era and how the Distributed, Immutable and Ephemeral triad works with the Confidentiality, Integrity and Availability triad to make organizations more secure.

Governance & Risk Management

Navigating a Digital Transformation Project

CyberEdBoard • November 8, 2021

Marcus Rameke of Nikko Asset Management Group in New Zealand shares how he led the digital transformation journey to enable it to fulfill new business requirements using an agile approach that made staff more mobile and able to achieve better productivity and revenue and improve client satisfaction.