Mark Simos

Lead Cybersecurity Architect • Executive and Board Advisor • Keynote Speaker • Professional Storyteller

[Mark Simos @MarkSimos]

All 18 of the Microsoft Cybersecurity Reference Architectures (MCRA) videos are now up!

We cover detailed technical information + context on security threats and business risk.

Share and Enjoy!

https://t.co/Q3twt7q4X0

Many thanks to my incredible co-presenters!

[Mark Simos @MarkSimos]

@UK_Daniel_Card That costs extra 😉

[Mark Simos @MarkSimos]

The SAF documentation site and June 2026 MCRA just went live on Microsoft Learn!

Check it out and let us know what you think!

https://t.co/afotqKE4mQ

Note: This is the first release and we will be continuing to add to it. Send us your feedback, requests, and ideas.

[Mark Simos @MarkSimos]

This is based on the workshops we deliver to Microsoft Unified customers (SecOps/SOC, Data Security, Infrastructure and Development, Access and Identity, and more).

end 🧵

[Mark Simos @MarkSimos]

SAF also ties together all of Microsoft's historical guidance (SDL, IR playbooks, Immutable laws of security, etc.) into a single organized framework that guides your security modernization journey.

[Mark Simos @MarkSimos]

I started off with an episode describing free resources from Microsoft, The Open Group, and The Zero Trust Playbook that you can use to improve your cyber security program, metrics, risk management, architecture, technology, SOC, and more.

[Mark Simos @MarkSimos]

Hey y'all I just recorded my first video in my new 'Mark on Cybersecurity' YouTube channel!

Lots more to come! Let me know what you think and what topics you would like me to cover

https://t.co/xejQXKPnvg

[Mark Simos @MarkSimos]

There is a big difference between using an engineered/supported agent like in Microsoft Defender focused on a single task vs. flexible interactive security interfaces like Security Copilot vs. asking any old random frontier model to do security.

End 🧵

[Mark Simos @MarkSimos]

I keep hearing people are "Automating Tier 1 with AI" (or some other job) and I think words really matter here.
◾ Are you trying to replace a human person with AI? Assigning a human role to AI?
◾ Are you automating the tasks currently being done by people?

a short 🧵

[Mark Simos @MarkSimos]

While we are being pedantic, it's also important to remember that AI is also not just one monolithic thing.

[Mark Simos @MarkSimos]

This was a main theme of my recent Tampa BSides talk "Security is a Team Sport (and we are NOT playing like a team) - slides downloadable here - https://t.co/XK0MyOZTix

[Mark Simos @MarkSimos]

Security can never “win the game” - it's not the job we signed up for.

We are the defense squad so we don't score goals or points - we just keep opponents from scoring points.

[Mark Simos @MarkSimos]

The organization can’t succeed without a good offense or without a good defense.

At the end of the day, security is a team sport where we have to work together!

[Mark Simos @MarkSimos]

Navigating this journey and earning this credibility requires communication and empathy to build relationships, trust, and partnership as well as political savvy and careful positioning.

end 🧵

[Mark Simos @MarkSimos]

One of the most critical skillsets for CISOs is their ability to navigate the power structure of an organization (e.g. politics)

I included this slide in my recent Tampa BSides talk (slides posted, recording pending) - https://t.co/XK0MyOZTix

🧵

[Mark Simos @MarkSimos]

Almost every CISO starts in a default starting position of being blamed. They must grow influence over business decisions with a goal of becoming “integral“ to decisions where business leaders wouldn't feel comfortable making a big decision without their counsel and thoughts.