Kelly White

CEO of RiskRecon, cyclist, skier, father, friend

[Kelly White @k3strel]

@wadebaker I like https://t.co/tmyA3syU4i

[Kelly White @k3strel]

@delta flight delayed now 4 different times. I asked the guy at the counter what was going on and he said “I don’t care. I’m off work in 9 minutes.” Nice @delta

[RiskRecon, a Mastercard Company @riskrecon]

CEO of RiskRecon, Kelly White, Weighs in on Vendor Risk Management. https://t.co/EHgLIW1u8I

[Kelly White @k3strel]

Two reasons why publicly endorsing your vendors is not risk-free. 1) Some customers who publicly endorsed httpx://247.ai where falsely accused by the media of having their data stolen. 2) It creates an attack map for hackers. https://t.co/19RarxzKq6

[Kelly White @k3strel]

You can outsource your systems and services, but you can't outsource your risk. Here is a summary of the third-party cyber security risk regulations. #thirdpartyrisk
https://t.co/OCoMce7pp6

[Kelly White @k3strel]

You can outsource your systems and services, but you can't outsource your risk. Check out the RiskRecon study of how companies are managing third-party risk. Pretty cool stuff. https://t.co/uEHcQVGClu

[Kelly White @k3strel]

"Risk is the probability that the choices I make today negatively constrain my ability to make choices in the future." #SIRACon2018 #saidByVerySmartPerson

[Kelly White @k3strel]

@ryancmoon @tomaszmiklas So true

[thaddeus e. grugq @thegrugq]

Enterprise security team watching their alerts dashboard

[Halvar Flake @halvarflake]

The tendency to yell at the bug discoverer versus at the delivery of buggy software is one of the most puzzling things about IT security.

[Vala Afshar @ValaAfshar]

Let's invest billions of dollars on advancing:

Artificial Intelligence
Blockchain
Internet of Things
AR/VR
CRISPR

...or build a long wall.

[Dr. Anton Chuvakin @anton_chuvakin]

"Hotel ransomed by hackers as guests locked in rooms" https://t.co/1BA6LprONK <- this here is REAL IoT security shit. Not DDoS nuisance

[Kelly White @k3strel]

@HockeyInJune@riskrecon Actually @riskrecon has quite sophisticated analytics and scoring - worth taking a look at for managing 3P risk

[ᴊᴀᴍᴇs ᴋ ᴀᴅᴀᴍsᴏɴ @jameskadamson]

Awesome insight into the amount of data publicly available for use in vendor risk management from @k3strell and @riskrecon #SIRAcon

[Halvar Flake @halvarflake]

Startups aren't hard. Stayups are hard. But what we really need is funding for a shutdown, not for a startup. (Stolen from @therealsaumil)

[Kelly White @k3strel]

@k3strel These guys must be taking some kind of IT Viagra to keep NT 4 up on the Internet for so long...see your dr!

[Kelly White @k3strel]

I found a Windows NT / IIS 4.0 system on the Internet today at a Fortune 100 company. I cried.

[🐘 @[email protected] @therealsaumil]

Slides from my keynote @IntuitIN's #Hacktober2015 event

2016: The Infosec Crossroads

http://t.co/ucgVFWD4bh

[Kelly White @k3strel]

The three pillars of Information Security - Executive Support, Talent, and Agility. All else follows this. Bag the CIA Triad.

[Kelly White @k3strel]

Good book - The Fighter's Mind