Ampsight’s Post

#CISOPerth24 Interesting conversations at this year's CISO Perth.   There were great speakers from different industries and a mix of vendors from various product categories. I spoke with more than 70% of vendors. It was interesting to learn how each of these vendors is trying to solve unique problems in cybersecurity (using technologies like eBPF, CDR, TDIR, identity-based security, and service networking, including AI :)). At the same time, security leaders had unique organisational challenges in improving cybersecurity.    One particular conversation centred around 'Product Pricing', comparing it to Netflix's subscription model. It was fascinating because security products are nowhere around Netflix—it takes a few seconds to create an account, and the next minute, you are watching your favourite shows. The challenges are still around:   🌟 It takes a long process to get a security product to the POC/POV stage to understand its value, which contributes to longer sales cycles.  🌟Onboarding is even more challenging.  🌟In addition, before introducing the product, you have to consider whether it fits your ecosystem. 🌟How easy is it to configure/maintain? 🌟Do you have processes to maximise the product offerings? 🌟Do you have people with skill sets who can use the product? 🌟How can you find and retain those people? 🌟How can you increase awareness among executives for buy-ins?   The speakers' presentations or panel discussions echoed some of my challenges at CISO Perth. It was nice to hear from higher education leaders Robbie Whittome and Vito Forte (he/him) MACS Snr CP IP3P GAICD on their cybersecurity journey, various panels, meet friends and colleagues Helen McLeish Yusuf D. Trevlyn Farrer Peter Weston Joel Earnshaw Caitriona Forde Cecily Rawlinson Amit Kulkarni   The CISO Perth event was a place for great conversations and meeting cybersecurity practitioners, old friends, and colleagues. Thank you Rhys Ghorashi   PS: Acronyms are not mine :)   #cybersecurity #PerthisOK #cisoperth #perthwa

Sharing the latest updates from our Secure Future Initiative (SFI), which we launched in November 2023 to advance cybersecurity protection for Microsoft, our customers, and the industry. Our commitment to security has never been stronger, and the progress we've made is a testament to the hard work and dedication of our team.   Key highlights from the September 2024 Progress Report include: 1) creation of the cybersecurity governance council, led by our CISO Igor Tsyganskiy, this council is responsible for our overall cyber risk, defense, and compliance; 2) security as a core priority for all employees at Microsoft and will be included in performance reviews; 3) launch of the security skilling academy a personalized learning experience of security-specific, curated trainings for all employees worldwide.   We are committed to fostering a security-first culture and ensuring accountability and transparency at the highest levels. Our senior leadership team reviews SFI progress weekly, and updates are provided to our Board of Directors quarterly.   Read more about our progress and the comprehensive approach we're taking to cybersecurity in the full report: https://lnkd.in/dv2n2q5k   #Cybersecurity #Microsoft #SecureFutureInitiative #SFI #SecurityFirst

"After a significant amount of time and extensive research, I successfully conducted a vulnerability analysis on Microsoft products. It was a challenging process that required navigating through difficult situations, but ultimately, my efforts paid off. I reported the findings, and I am pleased to share that I received official acknowledgment from Microsoft for my contributions." #Cybersecurity #Microsoft #VulnerabilityDisclosure #EthicalHacking #InfoSec#VulnerabilityAnalysis #Cybersecurity #MicrosoftSecurity #SecurityResearch #PenetrationTesting #EthicalHacking #VulnerabilityReporting #SecurityAcknowledgment #CVE #ExploitResearch #SecurityAssessment #NetworkSecurity #SoftwareVulnerability #InformationSecurity #ResponsibleDisclosure #RiskManagement #ThreatHunting #SecurityAuditing #SecurityContribution

Great to be part of a team building the future of cybersecurity. I've been really excited to see how our folks are using the Cybersecurity Workforce Framework. It's not just about learning technical skills—it's about knowing exactly what roles are out there and what’s needed to get there. We recently worked with a couple members of our team to outline their next steps in cybersecurity. They didn’t just pick up new skills; they figured out where they fit best in the industry and made some big moves that got them closer to their career goals. The framework has helped prepare professionals who are not just ready for today’s cyber challenges, but are excited about tackling them head-on. It’s been awesome to watch this transformation happen. https://lnkd.in/gwyrSA-u #Cybersecurity #CareerGrowth #WorkforceDevelopment

Today, our organization survived the Crowdstrike/Microsoft global BSOD crisis. We didn't survive it because we had next-gen bleeding edge tech. AI didn't help us. An advanced team of cyber security analysts weren't waiting to pounce on the next threat. We had people. We had people who didn't know how big of a deal this was, but they reported it at 3 am anyways. We had a leadership team that rallied around the IT department and trusted that this was worth waking people in all time zones of our organization. People are your greatest weakness, but they are also your greatest strength when it comes to responding fast to any crisis. Thankful for an organization that invests in its people and trusts in each other when it's time to act. All in all, less than .5% of our computers were affected. That's effectiveness. #cybersecurity #IT #crowdstruck2024 #people #culture #leadership #ITmanagement

Would there be nerves? Uncertainty? A bit of insecurity? Maybe even fear? After all, sharing the numbers behind your business can feel quite vulnerable, because the numbers never lie.📊 But if this idea makes you uncomfortable, that’s exactly why you should do it.⚡ We’re in the business of helping MSPs build profitable businesses that they’re proud to share. And that starts with getting real, honest feedback from both peers and mentors to help you tackle challenges in real-time. Our members tell us time and time again that this is a game-changer. You can experience that too. Push past the fear, reject the ego, and start building a business that you’re proud of.🌟 Do it here: https://lnkd.in/gMzJ2YMA #msp #msps #managedservices #managedserviceprovider #ITconsulting #informationtechnology #itservices #cybersecurity #itsupport #managedservices #manageditservices #cloudsolutions #itsecurity #it #datasecurity #techtalk #techcommunity

Glad to see leadership prioritise Security, this is good advice for all organisations! Memo form CEO Satya Nadella to all Microsoft staff “If you’re faced with the tradeoff between security and another priority, your answer is clear: Do security. In some cases, this will mean prioritizing security above other things we do, such as releasing new features or providing ongoing support for legacy systems. This is key to advancing both our platform quality and capability such that we can protect the digital estates of our customers and build a safer world for all.” #leadership #cybersecurity

People respond to their incentives. << One of the better things I ever learned and internalized. I'm thinking out loud here - this is not a well-formed opinion. If something like Client retention is hurting ... who is accountable? - One perspective says that is an Ops problem << My default fwiw - One perspective says that is everyone's problem << So we'll tie everyone's comp to client retention If I'm the COO and retention sucks, that's on me, completely independent of any contributing factors - I'm accountable. It's super easy to blame other people/things (Like the offering or pricing sucks), but that's not my style. I'd (of course) reach out for help where it was needed, but at the end of the day, it is on me. So if I'm COO and everyone's comp was tied to Client retention, I'm not sure I'm happy about that. It may well be required, but it's only required if I failed to address a pretty core metric of success in my role. The contributing factors were outside my control, but they weren't outside my influence. Good stuff to think about - my mind isn't made up.

💸 Last Chance to Win! 💸 Security leaders, give us your take on the latest tech & talent trends TODAY for your final chance to win a £200 Amazon voucher! Simply complete our 4-minute survey by answering key questions such as: • Where should CISOs be prioritizing technology investments? • What are the most significant barriers to strategy execution? • What challenges do security leaders face when building teams? In addition, you'll get priority access to Cyber Security in Focus 24 upon publication. Take the survey now: https://hubs.ly/Q02xxNHS0 #CyberSecurity #CISO #CyberSecurityRecruitment #CyberSecurityTrends

🌟 New Day, New Week, New Opportunities! 🌟 As we kick off another exciting week, it's the perfect time to reflect on new beginnings and fresh possibilities. Where are all the Managed Service Providers (MSPs) out there? 🤔 If you're on the lookout for a new vendor that offers one platform for total security, your search ends here! 🔍 Let's transform your security approach with a comprehensive solution that integrates seamlessly and safeguards every aspect of your business. 💼🔐 Are you ready to take your services to the next level? Let's connect and explore how we can drive success together! 🚀 #MSP #CyberSecurity #NewWeek #NewOpportunities #TotalSecurity #OnePlatform #LetsGo