TLDR; * Secure by design is a key step in building a healthy security program. It should not be done, or rather it should be done while designing and building applications and not as an afterthought. * When it comes to threat modeling, taking a pause and asking questions about possible threats
June 12, 2024
TLDR; * Risk Management should not only be reactive. It has to have the right balance between proactive and reactive strategies. * Continuous training and awareness programs are key for running a healthy and successful security program. Also, when it comes to training, it should be targeted vs generic. * Security is a
May 29, 2024
TLDR; * In order to ensure success of security programs, security engineers should not work in Isolation. Instead, they should collaborate across teams and organization. * For Incident Detection and Response, organizations should have a rubrik. It reduces the stress on engineers to figure out the right plan of action and next
May 15, 2024