@StrategicCISO
Joined March 2010
  • Tweets154
  • Following100
  • Followers275
3Media
a.co/d/hXleKJH The print version of my new book, The Book of Five Keys, just came out over the weekend, so I made the e-book version free this week. #BookofFiveKeys

The Book of Five Keys

The Book of Five Keys: Ancient Strategy Reimagined for Modern Cybersecurity

amazon.com
2
47
The Book of Five Keys: Ancient Strategy Reimagined for Modern Cybersecurity a.co/d/asU3wjW #Amazon via @Amazon Unlock cybersecurity strategy inspired by Musashi's timeless wisdom for the digital battlefield. Move beyond tactical tools to build a robust, resilient cybersecurity posture. #BookofFivekeys

The Book of Five Keys

The Book of Five Keys: Ancient Strategy Reimagined for Modern Cybersecurity

amazon.com
1
40
Recently, I presented this concept at #sasummit25. This article has a lot of the data behind that presentation. And even if you weren’t at the presentation, lots of good takeaways here! linkedin.com/pulse/beyond-ch… via @LinkedIn

Beyond Checkboxes: Transforming TPRM with Automation and Agility

The old ways of managing third-party risk are failing. Questionnaires and manual processes are overwhelming us with a sea of checkboxes, while third-party breaches continue to rise.

linkedin.com
31
Check out my latest article: A Study Guide on Boyd's Concepts linkedin.com/pulse/study-gui… via @LinkedIn

A Study Guide on Boyd's Concepts

NOTE: Recently Chet Richards posted an article about a Gemini NotebookLM that was created about Colonel John Boyd's OODA loop. I actually did the same thing recently and asked it to produce a study...

linkedin.com
25
The linkedin.com/pulse/future-tp…

The Future of TPRM is Collaborative

This edition of our Free TPRM Resources Newsletter dives into the critical (but often challenging) world of vendor collaboration. Discover why vendor engagement can feel like an uphill battle, how to...

linkedin.com
27
blackkite.com/blog/focus-fri…

Critical TPRM Insights: FortiGate, QNAP, Mongoose | Black Kite

TPRM insights into vulnerabilities in FortiGate, QNAP, Mongoose, and W3 Total Cache. Learn how Black Kite’s FocusTags enhance vendor risk management.

blackkite.com
24
Check out my latest article: Exploring AI Governance Through the Lens of OODA Principles and Asimov's Laws of Robotics linkedin.com/pulse/exploring… via @LinkedIn

Exploring AI Governance Through the Lens of OODA Principles and Asimov's Laws of Robotics

Exploring AI Governance Through the Lens of OODA Principles and Asimov's Laws of Robotics As artificial intelligence continues to advance rapidly, the need for governance frameworks that are both...

linkedin.com
47
Check out my latest article: Harnessing Entropy: Innovating Third-Party Risk Management in the Age of Disruption linkedin.com/pulse/harnessin… via @LinkedIn

Harnessing Entropy: Innovating Third-Party Risk Management in the Age of Disruption

Introduction Why write this? The inspiration for this thought leadership emerged from a poignant observation shared on LinkedIn by Clinton D. Pope , which resonated deeply with my experiences...

linkedin.com
66
FOCUS linkedin.com/pulse/focus-fri… A must-read about XZ-Util vulnerability.

FOCUS FRIDAY: Enhancing TPRM Through Insight on the Critical XZ Utils Vulnerability

Written by: Ferhat Dikbiyik Additional Contributions: Ferdi Gül Today, we spotlight a significant vulnerability within XZ Utils, a commonly used data compression tool, and explore the ramifications...

linkedin.com
82
Our Supply Chain & Nth Party Monitoring module is officially available. This first in the industry solution combines Nth-Party and high-profile cyber risk intelligence to help organizations anticipate and mitigate security incidents in their supply chains. Learn more about it here: blackkite.com/Black-Kite-Giv…
1
335
This weekend attackers made their way into into a popular compression utility, XZ-Utils. For two years, attackers worked to blend in with the community to begin making malicious strikes. @FerhatDikbiyik continues to investigate the XZ Utils incident and highlights which lessons can be drawn to safeguard against future threats in the TPRM world. Read more about the incident: blackkite.com/blog/could-tpr…
2
477
Check out my latest article: The Highwire Act between Agility and Regulation linkedin.com/pulse/highwire-… via @LinkedIn

The Highwire Act between Agility and Regulation

My Thoughts on the Executive Order to Protect Americans’ Sensitive Personal Data The Executive Order to Protect Americans’ Sensitive Personal Data Upon reflection, the Executive Order issued by...

linkedin.com
1
29
Check out my latest article: Harnessing the Power of AI and Machine Learning in Third-Party Risk Management linkedin.com/pulse/harnessin… via @LinkedIn

Harnessing the Power of AI and Machine Learning in Third-Party Risk Management

In the age of digital transformation, two technological advancements have dominated the discussion: Artificial Intelligence (AI) and Machine Learning (ML). While these technologies have found...

linkedin.com
1
42
Check out my latest article: Energy Maneuverability Theory and Third-Party Risk Management linkedin.com/pulse/energy-ma… via @LinkedIn

Energy Maneuverability Theory and Third-Party Risk Management

When my friend Francisco Igual posted about his new creation, the CyberGRC ChatGPT, https://chat.openai.

linkedin.com
1
29
Check out my latest article: Security Theater in Action: The NameDrop Feature linkedin.com/pulse/security-… via @LinkedIn

Security Theater in Action: The NameDrop Feature

The Feature: Apple's iOS 17.1 introduced NameDrop, a feature for quickly sharing contact information with nearby Apple devices.

linkedin.com
21
Check out my latest article: Cyber Risk Quantification: The Game-Changer in Third-Party Risk Management linkedin.com/pulse/cyber-ris… via @LinkedIn

Cyber Risk Quantification: The Game-Changer in Third-Party Risk Management

Cyber Risk Quantification: The Game-Changer in Third-Party Risk Management In the world of cybersecurity, our grasp of the risks we face often dictates our success in mitigating them. Traditionally,...

linkedin.com
27
linkedin.com/pulse/balancing… The Balancing Act of Fragile Resilience

The Balancing Act of Fragile Resilience (Fragilience *)

* Fragilience is a term coined by Christofer Hoff As the curtains fell on another Black Hat conference amidst the glitz and glamour of Las Vegas, a term seemed to reverberate everywhere: "resilienc...

linkedin.com
1
19
I'm speaking at New SEC Disclosure Rule: How will it impact your digital supply chain?. Would you like to attend? linkedin.com/events/newsecdi…
21
Check out my latest article: Federal Regulations and Cybersecurity: A Reality Check linkedin.com/pulse/federal-r… via @LinkedIn

Federal Regulations and Cybersecurity: A Reality Check

In the wake of an alarming discovery of hundreds of internet-exposed devices on the networks of US federal agencies, the efficacy of federal regulations in addressing cybersecurity issues has come...

linkedin.com
1
26
Check my new book - 'Unleashing the Power of the OODA Loop in Cybersecurity: A New...' by Bob Maley a.co/54RNdy2
14
Load more