Sign in Subscribe

Brian Weidner

Brian Weidner

Zero Trust — From Concept to Board Room Post 4 of 4

Zero Trust — From Concept to Board Room Post 4 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 4 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders We have covered a lot of ground in this series. We started with the business case and the executive conversation. We went deep on the

Zero Trust — From Concept to Board Room Post 3 of 4

Zero Trust — From Concept to Board Room Post 3 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 3 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders In the first two posts of this series we covered what zero trust is, why it matters, how to win executive and board support for

Zero Trust — From Concept to Board Room Post 2 of 4

Zero Trust — From Concept to Board Room Post 2 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 2 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders In the first post of this series, I walked through what zero trust actually is, why it matters more now than ever, and how to

Zero Trust — From Concept to Board Room Post 1 of 4

Zero Trust — From Concept to Board Room Post 1 of 4

Blog Series: Zero Trust — From Concept to Board Room Post 1 of 4 A Practical Guide for InfoSec Professionals, Aspiring CISOs, and New Security Leaders I have been in this industry for more than twenty years. I have lived through the transition from perimeter-centric firewalls to cloud-native architectures.

NCSC Secure Connectivity Principle 8: Establish an Isolation Plan

NCSC Secure Connectivity Principle 8: Establish an Isolation Plan

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series The plan you hope you never need — and why having it ready is non-negotiable in OT security Every other principle in this series has focused on preventing compromise, detecting threats, and limiting the spread of attacks that do occur. Principle

Shadow AI — What New CISOs Need to Do Before It Bites Them

Shadow AI — What New CISOs Need to Do Before It Bites Them

Picture a business analyst who wants to help her team move faster. She has thousands of customer support tickets to review, and a summary that would normally take three days sitting in front of her. So she opens a free AI tool, pastes in the data, and gets exactly what

NCSC Secure Connectivity Principle 7: Ensure All Connectivity is Logged and Monitored

NCSC Secure Connectivity Principle 7: Ensure All Connectivity is Logged and Monitored

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series Why logging and monitoring is your last line of defense in OT — and what effective OT visibility actually requires All security controls, however well-designed, carry the possibility of failure. Boundaries can be breached. Segmentation controls can be circumvented. Authentication mechanisms