TLDR; Thanks, Jan, for the insightful conversation. Here are a few things that I gathered. * For the compliance and security debate, understand different personas and their agendas, have a governing body that works with all of these personas, and helps with prioritization. * Always start with basic security practices and focus
August 07, 2024
TLDR * Standardization of logs is very important when designing a Centralized Logging and Monitoring solution. Both from a security and also from an engineering perspective. * When it comes to Logging, start with User Logs, System Logs, Config Logs, Network Logs, in that order to analyze for Detecting Security issues. * For
July 10, 2024
TLDR; * Communication, both written and oral, are key skills for security engineers and organizations should evaluate for this during the hiring process. * For startups while hiring, assessing the business risk has a huge impact because it helps you decide whether to hire a contractor or a pen tester or a
June 26, 2024