Security Strategy, Plan, Budget

In Episode 7 of the CISO Stories podcast, Paul Hypki, CISO at Children's Hospitals and Clinics of Minnesota, talks to the Cybersecurity Collaborative's Todd Fitzgerald about allocating funds to those places where organizations can achieve the maximum risk reduction.

Challenges include avoiding false-positive alerts, understanding a complex blend of IT and OT, and establishing policies on attack response.

In Episode 6 of the CISO Stories podcast, Steve Katz, former CISO of Citibank, talks to the Cybersecurity Collaborative's Todd Fitzgerald about building an information security department from the ground up.

Coca-Cola had a serious insider breach in 2018 when a former employee was found to have PII on some 8,000 employees. Today’s columnist, Neel Lukka of CurrentWare, offers eight security tips for offboarding employees when they leave the company.

The vulnerability was actively exploited in the wild – the company’s seventh such announcement of a zero-day patch in the past five months.

Spectre is a flaw in speculative execution in Intel, ARM and AMD processors that first came to light in 2018. The vulnerability could ultimately reveal the contents of memory.

Chief executive Sudhakar Ramakrishna described the work they’re doing as an “experiment” and said he has had conversations with CISA and the Cyberspace Solarium Commission about whether it could serve as a model for other businesses.