“To the letter” is a series around the analysis of standards, frameworks and RFQ/RFC that I find interesting — where I take the time to read and summarize my findings on the documents. Kicking it off with a hot topic, Zero Trust. I’ve discussed the topic on a few occasions…

Wi-Fi is a fundamental access medium to the internet (read: “World”) nowadays, I don’t think most people think too much about its security or the importance it has when they’re accessing their personal banking information or even work data, with current’s remote from work prevalent policies. This technology however is…

The Federally funded organization MITRE has been a godsend to Cybersecurity and Threat Hunting taxonomy. I for one am a huge fan of what they’ve achieved for the community — efficient Attack Techniques, Tactics & Common Knowledge. Oh look at that, effective ATT&CK! With their Database of threats you can…

It’s no secret that Cloud Service Provider such as AWS, Azure and Google Cloud Platform are central to modern companies’ IT Infrastructure. We’ve seen how Cloud Service Providers are powering Digital transformation with their ability to deliver fast, prompt and affordable services. …

Part of the improvement process — regardless of if it’s personal or an organizational process — requires retrospection and inspection of current capabilities and abilities and gaps to be addressed. This act is similar in definition to “Assessment”. As defined by a Large language Model: Assessment is the process of…

A Monthly summary of Strategic Information for Cyber Security Leaders This is a series spun from a need I identified when talking to CISOs — as explained on the kick-off article, this series follows the format of: What’s Top of mind in 3 domains: People, Processes, Technology for CISOs. People Google announces Safety news during I/O As…

Identity is the new control plane for data access. Your application might be sitting on-prem or on a public cloud, geez, “your” application might even be just a service — all you really control is your user’s identity. For this reason, many cyber security & threat intelligence vendors have been…

Setting up ways to test EPP/EDR/SIEM and even to ASSESS my setup! Lab management is a science I’ve grown very fond of in the past few years. And a key part of “labbing” is the ability to stand up and run simulations in an environment. Especially when you’re upskilling in…

A Monthly summary of Strategic Information for Cyber Security Leaders This is a series spun from a need I identified when talking to CISOs — as explained on the kick-off article, this series follows the format of: What’s Top of mind in 3 domains: People, Processes, Technology for CISOs. People The US Leak on Social Media The…