@trashp4ndasec @SerialPwny Entire CISO In a tweet? Challenge accepted.
1. Find a framework (CIS T20 is a good blind start)
2. Assess and score
3. Determine budget
4. Determine impact of increasing each item on framework
5. PivotTable: %Budget * Impact
6. Profit
Demo:
https://t.co/RSxKs3jqaI
Can you imagine buying a car, sitting at the dealership and once you've been shown how to use the infotainment and how to call for roadside assistance you simply sit there. Not driving, not moving, just sitting in a car in the parking lot.
No matter how you train a model; innovating insights and analysis is not pretrained. Existing insights and analysis can be done, but not a novel insight.
Point-in-time decision-making is powerful with AI but augmenting it and challenging its results with a creativity-based, dreaming, carbon monoxide convertor that accidentally loudly expels air when its happy is very powerful.
Sales: "You decide..."
You: "I need a car."
Sales: ....
** everyone blinks slowly **
This is completely unrelated to onboarding customers of course. Completely unrelated. Satisfaction comes from overcoming challenges, after all.
Sales: "Ok. Is there anything else?"
You: "What do I do now?"
Sales: "Well, you drive whereever you want to!"
You: "Yeah, but where?"
Sales: "Maybe home. The mall. The grocery store. The golf course. The world is now available to you. Enjoy."
You: "Which one?"
The world is a big scary place. We're all a little more resilient when we team up with those that compliment our skillsets.
Hi. I'm Abe. I spend most of my day helping leaders who build security programs for organizations big and small.
If you need to learn how to navigate, do it without a GPS.
If you need to disconnect, do it without your phone.
If you need to learn about your social environment, do it without social media.
If it needs your voice, write it without AI.
Don't forget how to do these things.
Vulnerability moment.
I am finding it increasingly difficult to keep my "cognitive load" down and stay focused as a leader of multiple departments at a global organization.
How do my fellow larger scale leaders keep it all organized?
They don’t replace your strategy, they help you execute it without burning out your team.
In a year where budgets are tight and threats are relentless, “DIY” is often the slowest and priciest path.
A lot of our customers, like many platforms, started on our Community edition. So I’ve seen many teams insist on building everything themselves: custom parsers, homegrown dashboards, endless tuning cycles. This can be very empowering, but the hidden costs can pile up.
By the time you’ve staffed, trained, and re-trained, you’ve spent more than you would have by leaning on experts who’ve solved the same problems hundreds of times. TAMs and PS aren’t shortcuts, they’re accelerators.
4. Blame is easy. Resolution is hard. Blame has no results other than weak people feeling slightly less weak (not being less weak, just temporarily feeling it).
Go forth, my friends, make some colossal mistakes and then improve the world with them.
I just scrolled a nasty comment section in a news article demanding the resignation of a senior leader after a corporate faux pas. It's a lot easier to say this outside the mob but the idea of asking for resignation of the person in charge is typically two steps backwards.
3. There will be no greater knowledge of how an organization truly works in a disasterous moment than the leadership coming directly out of a disastrous moment. A fire happens to be a great fire drill.