Concepts

Sometimes, a CISO needs to be an instant expert on a some concept – perhaps to explain it more deeply to peers, or more likely to need to define a strategy to apply security or leadership principles to it. Each of these concepts has a handbook – a quick summary of the concept – as well as relevant tagged posts and podcasts that might provide more color on the concept.

SaaS

Zero Trust

  • Zero Trust in Administration

    Zero Trust in Administration

    CrowdStrike, Windows domain administration, SolarWinds — our implicit trust in admin software is a recipe for repeated disasters. The…

  • Handbook: Zero Trust Principles

    Handbook: Zero Trust Principles

    In the 2010s, the cybersecurity community was introduced to the concept of zero trust, the idea that implicitly trusting…