Sign in Subscribe

management

To business, pen-testers are like jumbo-jets...

To business, pen-testers are like jumbo-jets...

...profitable only when on-air, expensive when in hanger. Second in the 'things no pentest course will teach you' series, this post talks about how business looks at pentesters, and what a pentester needs to keep in mind during their career.

Ask for this first, when you join as a CISO

Ask for this first, when you join as a CISO

As a CISO, ensure that you ask for this thing, as soon as you join an organisation. This will increase your chances of securing the organisation.

appeared on br3akpoint with neelu tripathi

appeared on br3akpoint with neelu tripathi

So, this happened. I appeared on a podcast. br3akpoint by Neelu Tripathy. spoke about ISO 27001, implementation challenges, and other nuances related to it.

Remember this clause while any enterprise application is being finalised for purchase

Remember this clause while any enterprise application is being finalised for purchase

How to ensure that, as a CISO, all the tools are properly integrated with your SOC?

Want to fight alert fatigue (in SOC)? Do this...

Want to fight alert fatigue (in SOC)? Do this...

Alert fatigue happens when a soc analyst ends up looking at too many alerts, resulting in missing crucial alerts. So, what's the way out? Read on.

Security is a cost centre

Security is a cost centre

security is a cost centre in every company, except ...

You are not getting value from pen-tests. Here are 5 reasons why.

You are not getting value from pen-tests. Here are 5 reasons why.

Penetration testing is a part of most of security regulations now. However, regulatory compliance need not be the only value proposition.As a customer, there could be 5 reasons why you are unable to get more value out of pen-tests. Have a read.

Do not kill your pentester for little or no value-add

Do not kill your pentester for little or no value-add

How to get more value out of a pentest.

How should a CISO deal with XSS?

How should a CISO deal with XSS?

I got many comments (thank you, everyone, as I learnt a lot) for my article that I published some time back.

Process Myths, Busted

Process Myths, Busted

This article was published by me on LinkedIn earlier. — — — — — — — — — — — — — — — — — — — — — — — — — - Disclaimer:-

Please don’t kill your CISO if he doesn’t know how a virus works

Please don’t kill your CISO if he doesn’t know how a virus works

Musings on some popular (and wrong) expectations from a CISO, by an aspiring CISO.