Clik here to view.
Accounting for Cybersecurity Risk in the Business
Digital transformation demands more cybersecurity, not just because it means “more IT” but also “riskier IT.” Newer technologies – such as mobile devices, social networks, cloud computing, artificial...
View ArticleClik here to view.
Rational Cybersecurity New Year Update
Updating the public on cybersecurity trends is not a trivial matter. At least to me, it is a vast potential topic space. Let’s outline it here and communicate further in the New Year. My World and...
View ArticleClik here to view.
Updating the Multi-Cloud Cybersecurity Reference Architecture
It is time to update the Multi-cloud Cybersecurity Reference Architecture I wrote for Techvision Research in 2020. If you’re a security architect, I’d welcome your feedback. Please download a detailed,...
View ArticleClik here to view.
Rational Cybersecurity Webcast: Applying the 80-20 Rule
As I worked on Rational Cybersecurity for Business, I became fascinated with this question: How can we find a way to gain 80% of the benefits for 20% of the work? Considering that cybersecurity has so...
View ArticleClik here to view.
The Cybersecurity Business Alignment Framework for Architecture
To ensure security architectures are relevant, you can define them using the Cybersecurity Business Alignment Framework provided in the Multi-Cloud Security Reference Architecture (“refarch”), Rational...
View ArticleClik here to view.
How can Cybersecurity Architecture Align Modern Business and Technology...
Cybersecurity architecture can show help us align business and technology concerns by providing modernized views of core processes and technologies. Today, that means focusing on a hybrid, multi-cloud...
View ArticleHow to Protect Privileged Access: Back to the Basics
Privileged access management (PAM) is a cornerstone of zero architectures and other efforts to shore up defenses against an increasingly insecure network edge and elevated danger from threat actors....
View ArticleClik here to view.
Digital Enterprises Need a Multi-Cloud Security Reference Architecture
A Security Reference Architecture model should enable businesses to create a business-centric, product-neutral, security process, and security technology savvy architecture of their own, to suit their...
View ArticleClik here to view.
Which is Easier: Aligning Business to Security, or Security to Business?
Which is Easier: Getting Businesspeople to think in terms of Security, getting Security Teams to think in terms of Business? While security leaders should work both angles, I say the correct answer to...
View ArticleClik here to view.
What we Can Learn from the SolarWinds Supply Chain Breach
How could elite security vendor and incident responder FireEye so easily succumb to Solorigate, a state-sponsored supply chain breach of unparalleled magnitude? You should be asking yourselves this...
View ArticleClik here to view.
Working Together to Create the Future of Security Architecture
The world really needs to take security architecture more seriously! If physical buildings were anything like security systems (experiencing a major breach practically every month), the news would be...
View ArticlePathways to Unified Endpoint Management (UEM)
Would you like to learn more Unified Endpoint Management (UEM) – and of course security – strategies? If so, please register for my November 12 webinar! Title: Pathways to Unified Endpoint Management...
View ArticleClik here to view.
5 Tips for Deploying Cloud PAM
Privileged account management for the cloud (cloud PAM) is at long last becoming easier to deploy. To see why, check out my September 17 webinar for BeyondTrust – The Expanding Universe of Privileges:...
View ArticleThe Expanding Universe of Privileges: Why Cloud PAM Matters (Webcast)
Would you like to learn how Privileged Account Management (PAM) systems should cover cloud environments? If so, please register for my September 17 webinar! Title: The Expanding Universe of Privileges:...
View ArticleClik here to view.
Defending the Digital Election Infrastructure
Someday we’ll conduct elections fully online, but to do that we’ll require a more secure digital election infrastructure. As the U.S. 2020 election process ramps up, technology plays an increasing...
View ArticleClik here to view.
At Long Last Rational Cybersecurity Publishes!
I’m so excited to finally announce that “Rational Cybersecurity for Business: The Security Leaders’ Guide to Business Alignment” is live. You can now buy a paperback, or get a complimentary digital...
View ArticleClik here to view.
Going the Extra Mile for Rational Cybersecurity
Successful security leaders don’t quit in the face of obstacles. They go the extra mile for their security program and understand that cybersecurity isn’t just a technical problem. It’s a people and...
View ArticleClik here to view.
Cleaning up Risk and Technical Debt in the Wake of the Pandemic
IT staff and developers have had to rework many business processes and applications to operate entirely online. When they make quick fixes, technical teams tend to cut corners. They remove firewall...
View ArticleEnterprise Cloud Security: Defending the Digital Lifeline (Webcast)
Do you think your organization issues with credentials or privileges as cloud adoption grows amidst COVID-19? If so, please register for my webcast on July 9! Title: Enterprise Cloud Security:...
View ArticleClik here to view.
Don’t be Doctor NO: New Book Helps Balance Restrictive Cybersecurity with...
Balancing what we’d like to do from the pure security control perspective with the need to align solutions with the business is a recurring theme in my book, Rational Cybersecurity for Business. The...
View Article
![[-100%] Commodity Intelligence – (Android Apps)](http://play-lh.googleusercontent.com/j67-qJvmnn4xnVlYVZ9ZhtZUJIgwjKekJGoKQT6D1KHcWGZxtQaFroummEvwV17na7tyh1pGbbeWCRdWtTKqeg=w950-h950)