Thom Langford

I reflect on the rugby Six Nations tournament's final match and draw parallels to cybersecurity, emphasising collaboration and camaraderie in both fields for improved performance and mutual support.

I remember back in early 1996 arriving home from work and telling the future ex Mrs Langford that was going to be very busy "for the next two to three months".

We all remember the Ocean's 11 styles of antics that criminals can emulate to gain access to IoT devices and, subsequently, the enterprise network on which they are hosted.

Gone are the days when being a CISO (or even just ‘the security guy/gal’) was about actual information security or IT security.

Murphy's Law states, "If something can go wrong, it will go wrong".

It is an accepted truth (trust me, I am a professional), that security is often seen as just a technical profession; firewalls, DLP, DMARC, SFTP and TLAs (Three Letter Acronyms)are thrown around with gay abandon.

In this post, we will take this a step further and closer to actual business as usual and maintaining your security team as a functional part of the organisation.

So you want to be a CISO?

Risk is a topic that I like to talk about a lot, mainly because I managed to get it 'wrong' for a very long time, and when I finally did realise what I was missing, everything else I struggled with fell into place around it.

It's unlikely that you will read a more dull and despairing title for a practical blog series than "Document & Review", and there is a high chance that you will even consider skipping this one.