True Colors of Cyber Security

The latest episode of True Colors of Cyber Security is here! This time we're looking at building a proactive incident and ransomware management program in five minutes. There are endless things to consider when protecting your organization, especially with all the high-profile attacks we're hearing about in the news. And keep in mind traditional incident […] The post A Guide to Building a Proactive Incident and Ransomware Program appeared first on Leaders in Information Security Program Development.

The latest episode of True Colors of Cyber Security is here! It's another episode of our Cyber Security Basics Series, and this time we're looking at security program development.  More specifically, we're looking at our four-step methodology to developing a functional security program, regardless of an organization's size or industry.  We sit down and go over each […] The post Cyber Security Basics: Development Methodology appeared first on Leaders in Information Security Program Development.

Today’s episode of True Colors of Cyber Security is another part of our Cyber Security Basics. We’re talking all things SOC 2 — what is it, who needs to worry about it, and what’s involved.  We talk over the basics of SOC 2, the difference between a Type 1 and Type 2 report, along with some reasons […] The post Cyber Security Basics: SOC 2 Type 2 appeared first on Leaders in Information Security Program Development.

This episode of True Colors of Cyber Security is all about the basics of the security program assessment. We look at what security program assessments are, why organizations have to conduct them, and more importantly, how they can be helpful to an organization’s security program goals.   This episode goes over key considerations around the security program... The post Cyber Security Basics: Security Program Assessment appeared first on Leaders in Information Security Program Development.

This episode of True Colors of Cyber Security is all about the basics of building a security program roadmap.  We’re talking about why organizations build security roadmaps and an approach on how to build one while simultaneously getting management-level buy in.  This episode goes over the steps a security team needs to take in order to make a customized roadmap based... The post Cyber Security Basics: Security Program Roadmap appeared first on Leaders in Information Security Program Development.

Today’s episode of True Colors of Cyber Security with President, Founder, and CEO Mike Gentile goes over some tips and advice for security leaders and employees alike. The goal of the episode is to give some hope and stability from a cyber security perspective amidst the changes brought on by COVID-19.  The episode covers both... The post Inspiring Hope in Cyber Security Amidst COVID-19 appeared first on Leaders in Information Security Program Development.

In today’s episode with CISOSHARE President and CEO Mike Gentile, we go over tips and lessons on implementing an effective third-party or vendor risk management program. We gathered insight from our own team, as well as lessons that other professionals have learned to give you a picture of what you should and shouldn’t do when you’re... The post Implementing a Third-Party Vendor Risk Management Program appeared first on Leaders in Information Security Program Development.

The discussion started with checking how we did with our predictions about regulatory fines and liability caps. In the wake of several large breaches, we’ve seen huge fines being collected, along with unlimited liability caps in new business relationships.  We’ve seen the diet pill mentality continue throughout 2019, namely through an over reliance on automation... The post Security Trends in 2019 and into 2020 appeared first on Leaders in Information Security Program Development.

Automation is a newer aspect of many organization’s cyber security programs. Companies are using technology and other solutions to try and make specific process areas of their security program policies more efficient, hopefully saving members of the team time and effort in certain areas.  Sounds simple, right? Find a solution that does what you want,... The post Automation Insight and Tips appeared first on Leaders in Information Security Program Development.

Cyber security frameworks. They form the foundation of your company’s security program, but they can easily feel overwhelming. This episode with CISOSHARE’s President and CEO Mike Gentile will hopefully demystify and explain what goes into a successful framework.  More than just cyber security best practices, the requirements included in your framework should be based on... The post Building a Cyber Security Framework appeared first on Leaders in Information Security Program Development.

In this episode of True Colors of Cyber Security, Mike Gentile walks us through what you need to know when you’re searching for a virtual CISO.  Whether this is the first time you’ve heard about virtual CISOs or they’ve been on your radar for a while, we go over some of the key points that... The post Choosing a Virtual CISO appeared first on Leaders in Information Security Program Development.

In the latest episode, we’re sitting down with CISOSHARE’s President and CEO Mike Gentile to talk about 10 mistakes people make in cyber security.  We go over 5 mistakes made by newcomers to the cyber security discipline, as well as 5 pitfalls that established veterans fall into. We cover a few of the following topics:  Lack of confidence... The post 10 Mistakes People Make in Cyber Security appeared first on Leaders in Information Security Program Development.

Veterans in Cyber Security In this episode, we’re looking into the human element of cyber security to talk about the veteran experience. Mike Gentile talks to us a little bit about why hiring veterans is an important part of CISOSHARE’s culture and business. We’ve opened up the conversation to Adam Couch, CISOSHARE’s Vice President of... The post Veterans in Cyber Security appeared first on Leaders in Information Security Program Development.

Women in Cyber Security In this episode of True Colors of Cyber Security, we’re joined by some of the talented women in CISOSHARE. We’re joined by Savannah Daugherty, Miad Moussawi, Malia Mason, and Amanda Nieznanski to share their experiences in entering the cyber security space, what it’s been like working in the industry so far,... The post Women in Cyber Security appeared first on Leaders in Information Security Program Development.

ISO Certification Tips and Experience with Juliana Wood, Director of Certifications, CIRQ In this episode, we’re talking about ISO — certifications, compliance, and how to determine whether your organization needs a full certification, compliance, or something in between. Join us along with Mike Gentile and our first guest! Calling in from Baltimore, we’re excited to... The post ISO Certifications with Juliana Wood from CIRQ appeared first on Leaders in Information Security Program Development.