TLDR; 1. Cross-training is key for CISOs. CISOs specializing in AppSec should also focus on other areas like Incident Management, GRC, and People Management to name a few areas. And remember Perfection is the enemy of good. 2. Communication is an essential skill for CISOs & Security Leaders. 2 Pro
December 04, 2024
TLDR; 1. Privacy engineering focuses on implementing privacy best practices for users and organizations. The core focus is user's privacy and responsible handling of their data. Finding the balance between experience and fatigue is key. 2. Privacy by design enables teams to incorporate privacy engineering practices to each
November 20, 2024
TLDR; * gcpwn (modeled after Pacu) is a great tool for pentesting covering enumeration and lateral movement. There are many more capabilities coming up soon with support for more Services and APIs. * Annual Pen Testing is a good start. But, pentesting should be as close to continuous as possible. It helps
November 06, 2024