Toxic Leadership and Insider Threat
3rd party breach causes Uber headaches
The security of your supply chain and 3rd parties cannot be overstated especially when they have access to Personal or Privileged information. Although its exceptionally difficult to police at least ensure that you have some form of coverage, do site visits, have in person interviews with their #ciso and get assurance and comfort that they act in your best interest, as you need to provide this assurance to your #leadership https://www.bleepingcomputer.com/news/security/uber-suffers-new-data-breach-after-attack-on-vendor-info-leaked-online/
I am at it again
Today I am losing it over the utter stupidity of having a Hospital connected to the web, not talking about client services I am talking about High and Critical Care networks and the stuff that you need to support that……so if you are one of the people advocating this, change my mind You can get the blog here 🙂 https://www.bankinfosecurity.com/blogs/troublemaker-ciso-how-much-profit-equals-one-life-p-3288
August 2022 Cyber Attack Stats
I just came across this interesting site which tracks attacks. Well worth taking a look and of course you can follow @paulsparrows on Twitter for the latest updates.
Woman in KSA
https://www.arabnews.com/node/2164026/saudi-arabia A stunning bit of news from the Kingdom. This is an AMAZING country filled with the most AMAZING people and if ever you are given the opportunity to come to the Kingdom, grab it.
Get the Organizational Basics Right
For your Information Security to be successful you need to look at the basics. In construction its a well known fact that your foundation is key, if you don’t have a solid base nothing you build on top will be stable. https://www.inforisktoday.com/blogs/troublemaker-ciso-get-organizational-basics-right-p-3245#.Yt6bQVu_QL0.linkedin
Killware!!??!!
Probing the question of connectedness of critical infrastructure in my usual weird way https://www.bankinfosecurity.com/blogs/troublemaker-ciso-killware-p-3207 Thank you to my friends at #ISMG for publishing my #Troublemaker #CISO blog
The Troublemaker is BACK
and this time the Cloud is getting it 🙂 https://www.bankinfosecurity.com/blogs/troublemaker-ciso-cloud-isnt-easy-p-3182
CISO Lessons
This is a bit of a dive into the world of the CISO… and my role within #teamercisson
