Arnaud Laudwein, CISSP

Chief Information Security Officer at Treasury Intelligence Solutions - CISSP, PMP

[Arnaud Laudwein, CISSP @arnaudlaudwein]

When recruiting, I love to explain what we do and our current challenges. Tips for candidates: chip in! Explain if you saw a similar problem, if you solved it, make it a discussion, be positive and passionate. We have jobs we love, we can surely do better than 1-sentence answers.

[Arnaud Laudwein, CISSP @arnaudlaudwein]

Escalation to management to force Security to accept exceptions shouldn’t be a thing.

[Arnaud Laudwein, CISSP @arnaudlaudwein]

It’s still very much “IT Security” vs. “Users Who Just Want To Work”, isn’t it? When do we start seeing Security as an enabler to business?

[Arnaud Laudwein, CISSP @arnaudlaudwein]

In an ideal world, business partners call us proactively to ask for help, not worried that Security Says No. They know we’re here to simplify their lives, to make them confident that they’re “doing it right”.

[Cathode Ray Dude @crdudeyoutube]

a thing I think about a lot is security advice that's basically just wrong because it's written with assumptions about corporate behavior that are not reliable.

[Heidi Shey @heidishey]

Employee privacy matters. It's a value. Not just about regulations or compliance. It's how you treat people, a key part of building a good employee experience, fostering trust.

[Arnaud Laudwein, CISSP @arnaudlaudwein]

@Infotechwarrior @rmogull Thanks for the great RSA talk and all the details about cloud attacks & prevention / detection measures, it's precise and actionable, that's just what we need!

[Arnaud Laudwein, CISSP @arnaudlaudwein]

"10% of what Google [Assistant] is recording is stuff it’s not supposed to record." And humans are listening to these recordings - be it Google's contractors or Amazon's. Large privacy concerns vs. the only way to train AI. Should we inform users better? https://t.co/ebN6awYXT6

[Arnaud Laudwein, CISSP @arnaudlaudwein]

Each website uses lots of third-party JS libraries, this is what can happen: @British_Airways received the “biggest penalty the @ICOnews (UK) has handed out” for their 2018 security breach(500 000 individuals). 367x higher than Facebook/Cambridge Analytica https://t.co/vebhX5VD3V

[Arnaud Laudwein, CISSP @arnaudlaudwein]

@denaltan @bitwarden There have been recurring issues with autofill in password managers (not talking specifically about Bitwarden), it's a good idea to keep it off by default! https://t.co/s0UOiQ4yJp

[Arnaud Laudwein, CISSP @arnaudlaudwein]

@ewarsaw Love Warsaw but I'm very sad about all the tags everywhere on all buildings, even in Nowy Świat! Are you planning to actively remove tags? In Paris you can signal tags and the city comes to clean them for free. https://t.co/Ar6bTiXIvP

[Arnaud Laudwein, CISSP @arnaudlaudwein]

@ChopinAirport Hello, accepting large football teams in the (usually delightful) Fantazja Lounge, makes it extremely noisy and not comfortable at all for regular customers... Just saying...(03/09 evening)

[Chris @brokenfuses]

"[IMO] some of the most impactful security work is simplifying code in systems, and that leads to better security" @laparisa #BHUSA

[Marilyn Cohodas @marilyn_cohodas]

If you are not upsetting someone, you are not changing the status quo. One example: Changing HTTPS - @laparisa #BHUSA #privacy #security

[Operation: Safe Escape @OSPASafeEscape]

"I can think of few greater missions than keeping people safe as the world grows increasingly dependant on technology."
- Parisa Tabriz, Google director of engineering

@laparisa
#BlackHat #BHUSA #blackhatevents

[Hannah Kuchler @hannahkuchler]

Cheers for ⁦@laparisa⁩ when she declares that blockchain will not solve all security problems #BHUSA

[Arnaud Laudwein, CISSP @arnaudlaudwein]

@cricketondns Missed the book signing at #RSAC :-( but the talk was great! Insightful and practical info to make a better use of our DNS.

[Ryan K. Louie, MD, PhD @ryanlouie]

"We have made a ton of progress." @mvzadel @IBMSecurity #RSAC Keynote. @RSAConference @IBM