CyberSecurity Smith - Cybersecurity Smith

News

Cybersecurity Industry Marks 15 Consecutive Years Of Demanding More Cybersecurity Professionals, Asks For 16th

Filed by Cybersecurity Smith ALEXANDRIA, VA. — The International Information System Security Certification Consortium, known as ISC2, released its annual Cybersecurity Workforce Study this fall, marking the fifteenth consecutive year in which the cybersecurity industry has called for an immediate and substantial increase in the number of cybersecurity professionals. ISC2 is

IT Department Achieves SOC 2 Compliance After CEO Asks Them To "Lean In" For Sixteenth Consecutive Quarter

Filed by Cybersecurity Smith CHARLOTTE — The information technology department at a mid-sized SaaS company successfully achieved SOC 2 Type II certification on Friday, sources confirmed, following an eight-month engagement during which the four-person team was asked to "find efficiencies," "do more with less," and ultimately "

POSTMORTEM: The Great Outlook Incident Of Q3

A reconstructed incident report, obtained by Cybersecurity Smith. Severity: SEV-1 Duration: 4 hours, 17 minutes Affected systems: Microsoft Outlook (corporate) Affected users: All of them, loudly 13:42 — Karen in Marketing reports Outlook is "doing the thing again." 13:43 — Help Desk asks what "the thing"

THOUGHT LEADERSHIP: 5 Lessons From The Breach We Didn't Have

From the LinkedIn of Brad Thornwell-Pierce, CISSP, CISM, CRISC, CISA, CCSP, CEH, Sec+, and recent recipient of the "Cyber Visionary Under 50" award from a publication he had not previously heard of. 5 Lessons From The Breach We Didn't Have This week, our organization successfully prevented

TICKETS: This Week In The Queue

A weekly column in which Cybersecurity Smith reviews real (fake) tickets filed between IT and Security. TICKET #SEC-4471 From: Brad Thornwell-Pierce, CISSP To: IT Operations Priority: P1 — CRITICAL Subject: Concerning login activity Body: I noticed unusual login activity on my account this morning. Please investigate immediately. This may indicate a

Security Team Identifies Critical Vulnerability, Forwards To IT With Note Reading "Fix?"

Filed by Cybersecurity Smith AUSTIN — The information security team at a regional logistics company on Wednesday identified a critical vulnerability in the firm's customer-facing portal and immediately forwarded the finding to IT operations with a short note reading, in its entirety, "Fix - Work Stoppage." The

CISO Presents 90 Page Slide Deck On Patch Management To Sysadmins Who Already Patched It Last Tuesday

Filed by Cybersecurity Smith DENVER — Sources inside a mid-sized financial services firm confirmed Tuesday that Chief Information Security Officer Brad Thornwell-Pierce, CISSP, CISM, CRISC, CISA, delivered a 90-page slide presentation on the urgent need for a comprehensive enterprise patch management strategy to a room of three sysadmins who finished patching