fyi - first Stealth Academy features three security startups - Lee Kappon (Suridata SSPM), @gadi on Knostic (AI Security), and Dinis Cruz (AI Security)
Zoom in to hear their pitches November 13th at 9AM PST / 12 PM EST
Register here to save your spot - https://defensiblesystems.substack.com/p/stealth-academy-winter-2024
This was a lot of fun to write.
Top 10 Account Risks: Defender's journey from Authentication to Compromised Credentials, from Triangulation to Good Customer with Cheating Intent
https://www.forter.com/blog/rh-isac-account-risk-mitigation/
Jeff Immelt when he took over running plastics at GE in the 80s: “i’ve got a 30% increase from last year, which is 2% over my stretch forecast.”
Larry Bossidy: “To what do you attribute your poor forecasting?”
Would have MTTR in top three
https://www.philvenables.com/post/you-only-get-3-metrics-which-ones-would-you-pick
Just over a year ago I put out this blog post on the 10 fundamental (but really hard) security metrics. Since then I’ve discussed this with a lot of people and have been thinking more about this in the context of how Boards can oversee risk. For Boards, in particular, it’s clear that they need to drive behaviors by tracking leading indicators as opposed to reacting negatively when current lagging indicators don’t meet their expectations. Despite 10 metrics not seeming a lot I’m becoming increasi
