About Kevin
I care about every corner of cybersecurity, but the part I’m most passionate about is the people side of it: culture, keeping good talent, and leadership.
My Books
Recent Posts
Subscribe
Categories
- Books and News (6)
- Critical Manufacturing Cyber Security (4)
- Cybersecurity Leadership Shorts (22)
- Leadership and Talent (11)
- Risk and Strategy (25)
- Security Operations (11)
- Youth Sports (2)
Archives
Category Archives: Risk and Strategy
SECURING CORPORATE IoT DEVICES: CHALLENGES, STRATEGIES, AND THE ROLE OF AI AND ML IN CYBERSECURITY
The rapid proliferation of IoT devices within corporate infrastructures has left organizations more vulnerable than ever to cyberattacks. It is essential to adopt a comprehensive approach that incorporates various techniques, tools, and emerging technologies, such as AI and ML, to … Continue reading
Posted in Critical Manufacturing Cyber Security, Risk and Strategy
Tagged compliance, cyber security, Cyber Security Incident Response, cybersecurity AI, cybersecurity IoT, Cybersecurity ML, Cybersecurity SOAR, information assurance, information security, information system security, risk assessment, Security
2 Comments
Zero Trust
For the past few years I was puzzled by the concept of Zero Trust (ZT). I thought it was this big, nebulous thing that I just could not wrap my mind around. Every time I asked a vendor partner for … Continue reading
A Risk Approach to Cybersecurity Vulnerability Management McLaughlin, 2022
When first arriving at an organization that has not invested in a major cybersecurity program and then looking at the sheer number of computer vulnerabilities in the environment a sense of feeling overwhelmed is a common initial response. In many … Continue reading
Posted in Risk and Strategy
Leave a comment
Small and Medium Size Organizations at Risk
The bad guys are now starting to target mid-tier companies with their hacking activities. In many cases these companies have not yet come to realize that having a Certified Chief Information Security Officer (C|CISO) or a Virtual Cerified|CISO (vC|CISO) is … Continue reading
Posted in Risk and Strategy
Tagged Application Security, compliance, cyber, cyber security, Cyber Security Incident Response, Incident Response, information assurance, information security, Information Security Policy, information system security, Information Technology, ISO, IT, leadership, risk, risk assessment, risk management, Security
Leave a comment
The Office of No, Really?
Successful ransomware attacks are at an all time high, we are losing the cyberwar, cyber criminals are making more money than ever before and it is only going to get worse, a cyber attack could be as damaging as … Continue reading
Posted in Critical Manufacturing Cyber Security, Risk and Strategy
Tagged Application Security, compliance, cyber, cyber security, Cyber Security Incident Response, cyber warfare, Incident Response, information assurance, information security, Information Security Policy, information system security, Information Technology, IT operations, leadership, risk, risk assessment, risk management, Security
Leave a comment
For Cyber Security the Perimeter Still Exists and Never Went Away
One item that really bugs me is to hear IT and Cyber Security professionals espouse that the perimeter is dead and that Cyber Security professionals should stop focusing on tools that protect the non-existing perimeter. I was at … Continue reading
Why Protect End User Workstations Instead of Servers First?
I have been lucky enough to spend most of my Cyber Security career doing startup operations for large companies. I thrive on the energy and passion that teams get when they are given the opportunity and support to design and … Continue reading
Critical Manufacturing Legacy Systems
One common item that information Security Professionals working in Critical Manufacturing environments have to deal with is that of legacy systems. You see, in Critical Manufacturing environments it is very common for the systems that run … Continue reading
Posted in Critical Manufacturing Cyber Security, Risk and Strategy
Tagged compliance, cyber, cyber security, Cyber Security Incident Response, information assurance, information security, Information Security Policy, information system security, Information Technology, risk assessment, risk management, Security
Leave a comment
Information Security Defense in Depth Part 2 – A Bit More Technical View
Still for foundation level folks but a bit more technical view of Defense in Depth than last week’s post.
