TLDR; Thanks, Cassie for the fun conversation. Here’s a summary of our conversation: * To enhance security program effectiveness, infuse security into daily practices of engineering and others. A simple example could be doing a security review as part of the code review process in SDLC. * Training and Awareness programs
August 28, 2024
TLDR; * Security baseline along with security boundaries define the security foundation for Organizations. There are various types of security baselines organizations should incorporate like Network, IAM, Infra, and Data. * Baselining is a continuous process. Define it, measure it, monitor it, and refine it using internal and external audits & findings.
August 21, 2024
TLDR; * For organizations, alignment between Revenue Goals vs Cost vs Risk is key for success. Instead of teams working in isolation, collaborate to improve the security of the organization. * Security is seen as a team of No. Instead of saying No, security teams should show the path to Yes for
August 14, 2024