A CISO shares his secrets to cyber security professionals and cyber nerds of how to consistently deliver infosec program value using security commits. This video isn’t a re-hash of agile but a completely new approach to prioritizing cyber security work items so the most important program building items are delivered…

It’s time for CISOs and cyber nerds to turn measurement of complex programs like information security engagement on its head so the metrics and KPIs are useful and actionable by more than info security practitioners. …

It’s time to turn measurement of complex programs like Cyber Threat Intelligence on its head so the metrics and KPIs are useful and actionable by more than cyber threat intel practitioners. …

Third party risks can feel like a never ending activity from a CISO perspective that provides little value and requires significant investment. If that describes your program, it’s probably not working. This video describes how you can turn your 3rd party risk assessment process on its head, make it measurable, and have the third party risk assessment process be a value-add to your overall infosec incident response program.

So, information security finally has a seat at the same table as the other executives. That seat is at the metaphorical adult’s table and the invitation has been opened at many organizations now. We, as infosec practitioners, asked for that seat and, in many ways the potential reputational and regulatory…

Long the domain of ex-developers, application security as its own discipline is maturing and beginning to gain interest from traditional information security practitioners and information security leaders. …

As information security professionals, we love the easy answers when easy is available. We should because, well, there is so little that is easy about our career path. …

Application security is finally getting the visibility the discipline deserves. Multiple blog posts and new books are bringing the craft of application security to the infosec masses. That’s a good thing. What might not be clear to aspiring application security practitioners or to CISOs and other senior cyber security practitioners…

Servant leadership seems to be a growing buzzword in cyber security. Robert K. Greenleaf coined the words “servant-leader” and “servant leadership” in 1970 with the publication of his classic essay, The Servant as Leader. Greenleaf wrote: “The servant-leader is servant first… It begins with the natural feeling that one wants…