JoeDon-GRC

IT GRC strategist and scold who specializes in the deployment of pithy metaphors to get wonky messages to worm their way into the minds of decision makers.

[JoeDon-GRC @JdonohueG]

Does your Incident Response Plan address "minor incidents?"
#IncidentResponse #cybersecurity #APT

[JoeDon-GRC @JdonohueG]

"That little glitch should be telling you something."

Ok. A bad pun on an old dandruff shampoo commercial, but the principle's the same. A minor symptom can be an indicator of a larger issue. So, investigate those seemingly innocuous recurring system errors.

[JoeDon-GRC @JdonohueG]

Just as early detection in personal health can avert a medical emergency (not that dandruff falls into this category), early detection of an APT can avert a major incident that interrupts your business for an extended period and leaves permanent scars on your brand.

[JoeDon-GRC @JdonohueG]

Did I mean to for the word "hashtag" to appear in my tweet? Maybe it's an attempt at hipster irony or maybe it's because I #tweetlikemygrandmother.

[JoeDon-GRC @JdonohueG]

Hard Truth: There's a certain irony in assessing a suppliers' security practices by emailing them a spreadsheet survey. The irony isn't lost on the more savvy suppliers. In the process your organization loses credibility with these suppliers. (1 of 2)

[JoeDon-GRC @JdonohueG]

If you want suppliers to take your infosec requirements seriously, it's vital that they know that your organization is serious about information security. There's a better way. (2 of 2) hashtag#VRM hashtag#vendorriskmanagement

[JoeDon-GRC @JdonohueG]

@AetherWorksLLC @ZeroDayLab Thanks for the share. I'd welcome any comments.