What Should We Stop Doing in Cybersecurity?

Published: Jan. 27, 2022, 11 a.m.

All links and images for this episode can be found on CISO Series

Security professionals are drowning in activities. Not all of them can be valuable. What should security professionals stop doing be to get back some time?

Check out\xa0this post\xa0for the discussion that is the basis of our conversation on this week\u2019s episode co-hosted by me,\xa0David Spark\xa0(@dspark), the producer of\xa0CISO Series, and\xa0Steve Zalewski.\xa0Our guest is Jim Rutt, CISO, Dana Foundation.

Thanks to our podcast sponsor, Thinkst

Most companies discover they\u2019ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Check out why our Hardware, VM and Cloud-based Canaries are deployed and loved on all 7 continents.

In this episode:

  • What tool or process should we stop doing to stop wasting time?
  • Are "third-party risk reviews" useful at all?
  • Can we smooth out the sales cycle?
  • Are users to blame, or are they the victims?