Chris Wilken

Let's fix security!

[Chris Wilken @whereswilken]

@MeasureTwiceMNY Share

[Chris Wilken @whereswilken]

@MerrittBaer @AccidentalCISO Security in the SDLC? I know, SDLC isn’t cool anymore…

[Chris Wilken @whereswilken]

@lovelydreamer @AccidentalCISO What specifically are you looking for? Basic OS design? AD/Server roles? Security hardening? User/group mgmt?

[Chris Wilken @whereswilken]

@tonybgoode Your tweet is fitting for the last one

[Chris Wilken @whereswilken]

@khaxan @NerdPyle I have this feeling that my bracket will massively bust today…

[Chris Wilken @whereswilken]

@khaxan @NerdPyle I knew better, but thought this year was different. Now I know what being a Mets fan feels like…

[Chris Wilken @whereswilken]

@NerdPyle I’m in

[Chris Wilken @whereswilken]

@CisoHelen @wendynather @nickgray produced an amazing list here: https://t.co/3ldeaWPukj

[Chris Wilken @whereswilken]

@AccidentalCISO @securitybrew You too? I thought I was the only security professional by day, plumber by night.

[Chris Wilken @whereswilken]

@toddmckinnon Thanks!

[Chris Wilken @whereswilken]

@SwiftOnSecurity

[Chris Wilken @whereswilken]

@try_it_sometime @AccidentalCISO What is the purpose for the audit? Physical security? Asset Mgmt? General computer controls?

[Chris Wilken @whereswilken]

@scottmassari @SwiftOnSecurity Assuming it’s this? https://t.co/odHfac2oYO

[Chris Wilken @whereswilken]

@nickgray @michaelalexis I believe @tonybgoode was there

[Chris Wilken @whereswilken]

@nickgray Please start a conga line

[Chris Wilken @whereswilken]

@Frichette_n 💯but Twitter as threat intel is hard to sell to auditors…

[Chris Wilken @whereswilken]

@marcoarment One approach is to say that you are aware of it and it is on the roadmap to get implemented next quarter. A majority of these are sent to so many targets that they’re just looking for payment. Another option is to give swag instead of $

[Chris Wilken @whereswilken]

@kadavy this is for you! https://t.co/EepGYo8a73

[Chris Wilken @whereswilken]

@nickgray So no to investing into a low cost S&P index fund and accumulating wealth over time?

[Chris Wilken @whereswilken]

@poiThePoi @hacks4pancakes Find out if anyone with security exp helped them with the decisions into their design and what was the focus. Based on their response, you can then ask more questions about arch or go into asking about other aspects of security (access mgmt, sec config, sdlc, sec mon, vuln, etc)

[Chris Wilken @whereswilken]

@poiThePoi @hacks4pancakes Then ask if everything talks with each other over the Internet restricted by IPs or if they have a firewall and network segmentation where specific resources talk only to other resources via private networks