Articles & Presentations
NIST CSF Over Time
A Cyber Program Overview
A Cyber Program Overview
Maturing one's program vs. the 5 NIST CSF domains - originally presented at RSA Conference, June 2022
A Cyber Program Overview
A Cyber Program Overview
A Cyber Program Overview
A comprehensive (read: long) look at the fundamentals of running a cybersecurity program. April, 2022.
Tabletop Exercises
A Cyber Program Overview
Tabletop Exercises
November, 2021 presentation on getting the most out of tabletop exercises.
Overcoming Cybersecurity Excuses
Leadership - How It Is Defined, How It Is Measured, Where It Resides
Leadership - How It Is Defined, How It Is Measured, Where It Resides
Overcoming cybersecurity excuses - yours and theirs - through better communication and strategy. Presented at TEISS London February, 2019
Leadership - How It Is Defined, How It Is Measured, Where It Resides
Leadership - How It Is Defined, How It Is Measured, Where It Resides
Leadership - How It Is Defined, How It Is Measured, Where It Resides
An academic research paper on leadership that seeks to find a more objective understanding of leadership. This version includes an annotated bibliography with notes to self.
How to Get Your Organization to “Own” Security – First Steps
Leadership - How It Is Defined, How It Is Measured, Where It Resides
Is The Security Industry Solving Our Problems? And What Can We Do Without It?
June, 2019 article in Security Current about using a cybersecurity council to kick off ownership of security in the business
Is The Security Industry Solving Our Problems? And What Can We Do Without It?
Is The Security Industry Solving Our Problems? And What Can We Do Without It?
Is The Security Industry Solving Our Problems? And What Can We Do Without It?
Presented at the Texas Department of Information Resources Information Security Forum, April, 2019 (and GDS Security Insight Summit, May, 2019)
Security Innovation Awareness Through Vendor Relationships
Is The Security Industry Solving Our Problems? And What Can We Do Without It?
Security Innovation Awareness Through Vendor Relationships
February, 2019 presentation on how to leverage the vendor community to improve your security game. Presented to TEISS, February 2019 and GDS Security Summit, December 2018
The Security Startup Name & Mission Generator!
Is The Security Industry Solving Our Problems? And What Can We Do Without It?
Security Innovation Awareness Through Vendor Relationships
A moment to poke fun at our industry. Pick something from each column to name your startup and pick your mission. The angel and VC money will no doubt flow in!
How to Build a Better CISO
GDPR for Security Practitioners
GDPR for Security Practitioners
January, 2019 Article for HelpNet Security Magazine
GDPR for Security Practitioners
GDPR for Security Practitioners
GDPR for Security Practitioners
September, 2018
Presented at CDM Media Security Summits in Dallas and Toronto, 2018
Security Metrics
GDPR for Security Practitioners
Governance without Management in the Absence of a Perimeter
July, 2018 LinkedIn Article
Governance without Management in the Absence of a Perimeter
Governance without Management in the Absence of a Perimeter
Governance without Management in the Absence of a Perimeter
April, 2018 LinkedIn Article
Why Hackers Love Healthcare
Governance without Management in the Absence of a Perimeter
2018 Cybersecurity Predictions
April, 2018 Article for Dark Reading Magazine
2018 Cybersecurity Predictions
Governance without Management in the Absence of a Perimeter
2018 Cybersecurity Predictions
February, 2018 LinkedIn Article
Interviews & Panels
CyberWire Hacking Humans Podcast
CISO/Security Vendor Relationship Series
CyberWire Hacking Humans Podcast
November, 2019 podcast interview about why security must be friendly
Dialedin Live Pocast
CISO/Security Vendor Relationship Series
CyberWire Hacking Humans Podcast
July, 2019 live interview about the toughest questions a CISO must ask, and many other topics.
CISO/Security Vendor Relationship Series
CISO/Security Vendor Relationship Series
CISO/Security Vendor Relationship Series
June, 2019 live podcast. Guest was Dan Lohrmann, and we addressed privacy, and BAD best practices.
TechTarget Interview
TechTarget Interview
CISO/Security Vendor Relationship Series
May 2019 interview on cloud security. There is a mis-statement here. I advocate "back to the basics" at all phases of a security program - not just as a starter.
ZeroHour Podcast
TechTarget Interview
Silicon UK Interview
May, 2019 interview about the business, product & security in the role of the CISO
Silicon UK Interview
TechTarget Interview
Silicon UK Interview
April, 2019 Silicon UK interview about the IT & CISO life. I really am keen on ML and AI once the market consistently produces actual and real examples. I remain hopeful!
ITSP Magazine - Unusual Gatherings
IDG Connect - CIO Spotlight Interview
ITSP Magazine - Unusual Gatherings
March, 2019 panel interview by Sean Martin along with Sian John and Candy Alexander.
Between Two Kernels
IDG Connect - CIO Spotlight Interview
ITSP Magazine - Unusual Gatherings
March, 2019 over-the-top deadpan, dry humor and meant for fun only. It was very hard to keep a straight face.
IDG Connect - CIO Spotlight Interview
IDG Connect - CIO Spotlight Interview
CISO/Security Vendor Relationship Series
February, 2019 general interview regarding my career path and different facets of the CISO life over the last year.
CISO/Security Vendor Relationship Series
Business of Security Podcast - GDPR & Other Topics
CISO/Security Vendor Relationship Series
January, 2019 interview covering security fundamentals, collaboration between CISOs, infosec as a campaign and security as compared to IT
Cyber Startup Observatory - CISO of the Week
Business of Security Podcast - GDPR & Other Topics
Business of Security Podcast - GDPR & Other Topics
November, 2018 - I was honored to be chosen as CISO of the week. I was interviewed on a variety of CISO topics.
Business of Security Podcast - GDPR & Other Topics
Business of Security Podcast - GDPR & Other Topics
Business of Security Podcast - GDPR & Other Topics
November, 2018 - Another great podcast series, and another fun interview.
SC Magazine - Unfogging the Future of SIEM
SC Magazine - Unfogging the Future of SIEM
SC Magazine - Unfogging the Future of SIEM
October, 2018 interview for SC Magazine's "ebook" series. Apparently I'm more opinionated about first generation SIEMs than I realized...
CISO/Security Vendor Relationship Series
SC Magazine - Unfogging the Future of SIEM
SC Magazine - Unfogging the Future of SIEM
September, 2018 in-depth interview following up on my August, 2018 announcement to begin openly embracing the vendor community.
My Vendor Experiment in Detail
SC Magazine - Unfogging the Future of SIEM
CISO/Security Vendor Relationship Series
A September, 2018 interview regarding my voluntary experiment to allow vendors into my work life to the tune of 2 hours a week.
CISO/Security Vendor Relationship Series
CISO/Security Vendor Relationship Series
CISO/Security Vendor Relationship Series
August, 2018 interview with one of the most relevant CISO podcasts out there - topics include leveraging compliance for real-world security, and how CISO's discover new solutions and technologies
IT Security Guru: CISO Chat
CISO/Security Vendor Relationship Series
March, 2018 Got Friends? Segment
June, 2018 interview covering blockchain, industry trends and gripes, and security vs. privacy
March, 2018 Got Friends? Segment
CISO/Security Vendor Relationship Series
March, 2018 Got Friends? Segment
March, 2018 Video interview about 2018 predictions and CISO trends. I didn't have my glasses, and am hunched over the screen, squinting. Good interview despite.