Simon Goldsmith

InfoSec for zero carbon living. Back in🇬🇧 after 🇮🇹 🇦🇪 🇪🇸 and 🇨🇳 Former egg-chaser 🏉 Views own.

[Simon Goldsmith @CyberGoldsmith]

Software security as a system control problem - Coach CISO https://t.co/UcliZUX9GA

[Simon Goldsmith @CyberGoldsmith]

The ability to destroy a planet, or even a whole system, is insignificant next to the power of the Force.

[Simon Goldsmith @CyberGoldsmith]

@cnathansmith @gabsmashh Judgement IS spelt with two e’s

[Simon Goldsmith @CyberGoldsmith]

Move over Crowdstrike, the French are here🇫🇷

[Simon Goldsmith @CyberGoldsmith]

Somebody who works in security should probably have a word with Fortinet’s event marketing team. No irony detected.

[Simon Goldsmith @CyberGoldsmith]

@arekfurt Incentives are to compete to build the best tech, quickest. Apart from FS, it’s market forces for corporate and personal jeopardy in tech. Throw in existential crisis on the power and legitimacy of nation states to keep their people safe as a barrier to understanding and reform.

[Simon Goldsmith @CyberGoldsmith]

@ImposeCost An example of strategic in the civilian sense (rather than military geographic sense) would be threat landscape work. Eg a generic threat landscape report as pre-cursor for the target TI report in a TIBER-EU or CBEST exercise

[Simon Goldsmith @CyberGoldsmith]

@OVOEnergy sponsoring the @ndawards Belonging networks representing our amazing zero carbon company. #nda2023

[Simon Goldsmith @CyberGoldsmith]

@ImposeCost And the tendency of tech to act as accelerant and scale these practices that is not well communicated

[Simon Goldsmith @CyberGoldsmith]

Thoroughly enjoyable panel at the European CISO Community event in Cascais, Portugal sharing the stage with the ever erudite @philvenables discussing the relationship between org culture and tech (and cyber) industrialisation.

[Simon Goldsmith @CyberGoldsmith]

@Coffee_Fueled Or, per James Carse and @simonsinek: a secure organisation can keep playing the infinite game, an insecure one, cannot.

[Simon Goldsmith @CyberGoldsmith]

@Coffee_Fueled How about:
Secure B2Bs can keep and to an extent win new business
Secure B2Cs are able to be transparent and enable validation of claims made about ethical, moral and legal treatment of (their own and their customers’) data

[Simon Goldsmith @CyberGoldsmith]

@Laughing_Mantis We must not allow mutate to become a transitive verb let alone something developers do to code. Stand firm.

[Simon Goldsmith @CyberGoldsmith]

@JamWaterhouse TBC

[Simon Goldsmith @CyberGoldsmith]

@anton_chuvakin Because by default and by design mean different things and have very different financial incentives.

[Simon Goldsmith @CyberGoldsmith]

@anton_chuvakin https://t.co/2Q2Lq3jgkG

[Simon Goldsmith @CyberGoldsmith]

@anton_chuvakin You do not say what they DO have. More relevant?

[Simon Goldsmith @CyberGoldsmith]

@GergelyOrosz Hugely impressed by the tech talent I worked with @Nordea in Gdynia a few years ago

[Simon Goldsmith @CyberGoldsmith]

@CisoHelen My team have been supporting @UnlockCyber in the West of England for exactly this reason

[Simon Goldsmith @CyberGoldsmith]

Such an important concept that a lot of public reporting misses

[Brian in Pittsburgh @arekfurt]

In other words, in the free world the law (and the willingness of entities to follow it) and not technology will likely remain the major guarantor of our privacy from unjust governmental spying for the foreseeable future. Highly imperfect as that is, it's far more realistic.