Ioannis Bizimis

silobreaker and ciso

[Ioannis Bizimis @defense_active]

@anton_chuvakin Yes and layers below 7 will be permanently ransomed…:)

[Sam Altman @sama]

ChatGPT is incredibly limited, but good enough at some things to create a misleading impression of greatness.

it's a mistake to be relying on it for anything important right now. it’s a preview of progress; we have lots of work to do on robustness and truthfulness.

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

This will hurt a lot of feelings so buckle up.

Cyber security is exactly as difficult as your org makes it.

If you have burdensome process, if your machines are overloaded with agents, if you have alert fatigue, etc.

You have a culture problem, not a tech problem.

1

[Phil Venables @philvenables]

Some great security programs come from the results of grand challenges but all have a relentless commitment to execution.

#1 - Plan for that relentless grind

https://t.co/3mMY9RrxAy

[Phil Venables @philvenables]

Ian Levy’s departure blog (from UK NCSC) is pure gold.

For me his point about details matter is spot on. Too many reports / calls to action gloss over details and nothing gets done or things stall because no-one worked through the needed detail.

https://t.co/PAMbmEuQ7q

[Ioannis Bizimis @defense_active]

@anton_chuvakin @jcfarris Perhaps: for smoother migration rides: provide sovereignty model like an onion. Outest is the enduser, accountable, responsible. Inner rings are managed/outsourced service/cloud providers. They could provide auditable options for any desired sovereignty ops model mix/fate.

[Ioannis Bizimis @defense_active]

@anton_chuvakin Mine😬😉

A target operating model that delivers safety | security and (regulatory | framework) „compliance“

[James Clear @JamesClear]

The ultimate form of preparation is not planning for a specific scenario, but a mindset that can handle uncertainty.

[Ioannis Bizimis @defense_active]

@anton_chuvakin @JayHeiser1 Maybe: understanding the A to Z of that decision first. Potentially still unclear to many orgs. It is a form of outsourcing, the context in which it happens is specific for each organization. => having the retained budget, orga, skills to manage cloud (and on-prem in parallel)?

[ɔǝs¯ʎuuɥoɾ @johnny_sec]

#OSCP Online, Part-Time #Pentest Training in German language. Wer Interesse hat schreibt mich gerne an für einen Voucher mit Preisnachlass #solangedervorratreicht ;) Wer hätte gedacht, dass wir das mal hingestellt bekommen ;) https://t.co/7C6s4Y90Rp

[Ioannis Bizimis @defense_active]

@runasand Perhaps: ideologism, denial, or motivated reasoning.

[Ioannis Bizimis @defense_active]

@101stAASLTDIV Lest we forget all of them 🖤

[101st Airborne Div. @101stAASLTDIV]

We are deeply saddened to hear of Jim “Pee Wee” Martin’s passing.  He is a true legend in the 101st and will live on forever. This division was founded on the sacrifice, valor, audacity and sheer grit of Soldiers like Pee Wee Martin.  Pee Wee will be greatly missed.

[Ioannis Bizimis @defense_active]

@gadievron Dry aged peppers

[Ioannis Bizimis @defense_active]

@philvenables Indeed. Also reminds me of active and passive safety engineering eg. in auto or aviation. A lot of these elements are now standard and unthinkable not to be in each model's spec sheet and outfit. Sometimes these approaches work independently, on different layers, in combination.

[Dr. Anton Chuvakin @anton_chuvakin]

This 2009 (!) blog came up in a conversation today: https://t.co/kyUobS8XIa - to me, this is still one of the best illustrations of compliance != technical security; it is juicy, painful, hits hard and didn't age at all since 1912...

[Ioannis Bizimis @defense_active]

@anton_chuvakin Digital transformation is the highest priority and we will cut the budget before we start. Wash my fur, but don't get me wet.

[Ioannis Bizimis @defense_active]

@gadievron 😂