Beyond the Annual Checkbox: How Purple Team Exercises Can Replace Compliance-Driven Penetration Tests
Annual penetration tests are a cybersecurity ritual driven by governance,...
Posts about
strategy
Key Takeaways from UniCon 2025 – Fall Edition
UniCon 2025 – Fall Edition which took place on September 17, 2025 brought...
Is a TTX in Your Future?
Whether you're the U.S. Army, the New England Patriots, or the security...
The Future of Proactive Cybersecurity: Key Trends to Watch in 2025
In today’s cybersecurity landscape, standing still is not an option. Threat...
The 20/80 Rule in Tool Utilization
In my decade-long tenure as a CISO within the Defense Industrial Base (DIB),...
Why Cyber Risks Persist for Companies, Even with In-House Teams or MSSP Support
As cyber threats become more sophisticated, organizations are increasingly...
Rethinking Cyber Security Budgeting
Imagine cybersecurity managers as the architects and builders of a fire...
Quantifying Business Risk Reduction and ROI
Justifying Threat Emulation By The Numbers Today, businesses face the daunting...
Measuring Cyber Risk with Bryson Bort & Paul Rosenzweig
Good management of cyberspace requires a system of cyber metrics that are...
