Setting Scope Expectations With Your Offensive Security Service Providers – Chris McCurdy – CFH #1
Companies must communicate clear expectations when contracting with pentesters, red teams and vulnerability hunters in order to set key ground rules for what data and systems can be accessed, what’s off limits and who is responsible if something breaks. Of course, if you set too many restrictions and parameters, then how do you really know if you’re safe from malicious hackers, who of course don’t play by the rules?
Plus: We Speak Geek, a weekly segment where our guest shares what they geek out about!
Gallery Images
Chris McCurdy, Vice President Worldwide at IBM Security, has more than 25 years in the IT Consulting Services industry and has been with IBM Security since 2006, through the acquisition of Internet Security Systems. McCurdy has extensive experience working with large enterprise and government clients around the world. His focus is to help clients reduce cyber risk, support compliance, and drive overall security maturity.
Before joining IBM, McCurdy was a Managing Consultant at several consulting firms, including Andersen, International Network Services, and Lucent Technologies. He was also a former CIO at a large retail automotive group located across the United States. McCurdy holds a BBA in Information Systems from Baylor University.
Is the MSSP Model the Wave of the Future? – CFH #1
If you were to ask most companies right now, "Why you have you hired an MSP?" the answer probably would sound something like: “Resources are strained. Talented is limited. So we’re outsourcing certain security functions to a firm that has the built-in capabilities to manage this for us.” But is the MSSP model becoming more than a convenient economics and personnel decision? Is this actually becoming a go-to "must have" for all organizations -- the next logical evolution in the industry’s approach to solving security?
Plus: Dear Cyber for Hire, our marriage counselor advice column for MSPs and their clients. And The Security Detail, our curated rundown and analysis of the latest cybersecurity news.
Bradley Barth
- New survey reveals $2 trillion market opportunity for cybersecurity technology and service providers
- Snack giant settles with insurer over $100 million claim tied to 2017 NotPetya attacks
- Nearly a Third of Cybersecurity Leaders Considering Quitting
- The ‘Text4Shell’ vulnerability is not a sequel to Log4Shell
