Markesman Group’s Post

Food for thought. I've often asked of anything I create or do "does it help?" If the answer is "no" when you ask that question of your own output, what you say or do next matters most. Keep that in mind! Thanks for sharing the blog Ⓜ️ Micah V.!

"There are only three categories to business value." I had an awesome chat with Nir Kalish last week on this very topic, and as the founder of a young company, it really stuck with me Too many founders get bogged down in talking about why their product's *technical* capabilities are, but too many miss the point on what *value* their product is providing. Nir did a great job scoping it out for me: 1. 𝐈𝐧𝐜𝐫𝐞𝐚𝐬𝐞𝐝 𝐩𝐫𝐨𝐝𝐮𝐜𝐭𝐢𝐯𝐢𝐭𝐲: Can you help a team or a business get more output out of fewer resources? Can you save a team's time, or make an existing process more efficient? 2. 𝐄𝐧𝐚𝐛𝐥𝐢𝐧𝐠 𝐭𝐡𝐞 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬: Are you allowing them to increase revenue, reduce costs, or enter new markets? 3. 𝐒𝐞𝐜𝐮𝐫𝐞 𝐭𝐡𝐞 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬: Are you protecting the business from attacks, breaches, or other threats that could impact their company/brand? It makes a ton of sense when you think about it. I was going through this for Cotera and I found myself realizing just how much more convincing my arguments were. Read more about Nir's wise words on our blog!

This is a very thought provoking post by Jackson T. I really like the way the information was laid out and there are several good questions. From my perspective, I see the pressure from clients to demonstrate a big impact by evading detection and response. Sometimes it requested solely to prove that it is possible for adversaries to go undetected. I personally think there has been plenty of public reporting that shows it’s possible. I also feel that it would be more valuable to focus on identifying areas the evaluated environment can improve instead of rehashing the feasibility. To pile on there’s a big difference in detecting a ransomware group versus a well funded and backed adversary. If the question is something like “can you evade this endpoint software?” then for the near future the answer is probably yes. I personally can’t do it, but I’m certain someone in the industry will figure out a way. It’s just a question of time and money. This is why we often hear the saying “it’s a cat and mouse game”. I think it’s better to not focus on trying to find ways to end the big-picture cat and mouse game on evasion and instead focus on attack path management in your environment where misconfigurations and vulnerabilities are identified, exploited to demonstrate impact, and then removed. What are your thoughts on the blog or my ramblings? https://lnkd.in/ejEXcaqZ

How do SMBs rate their IT security status? Principals of SMBs with fewer than 20 employees most commonly rate their IT security between three and seven on a zero to 10 scale (10 being best). These very small businesses are significantly more likely to rate their security seven or below compared to principals of SMBs with 20-99 employees and those with 100 to 500 employees. In other words, SMBs with 20 or more employees feel much more confident about their IT security than those with fewer than 20 employees. Interested in learning more about your SMB prospects? Bredin, Inc. can help. #SMB #ITSecurity #BusinessInsights

This was an incredible panel discussion to watch (hosted by Tom Alcock of Code Red Partners). If you want to know how some brilliant CISOs/Heads of Security think, this is your one stop shop. GRC is all about understanding security through a business lens. Knowing exactly how your organization's leaders think is the ultimate cheat code.

Are you a technology start-up looking to make your first security hire in 2024? If you're thinking about building out a security program or making a founding security hire and don't know where to start, this resource is for you. Heres a #throwbackthursday from BSidesSF 2023 where I was joined by a group of impressive panelists discussing: "First Security Hire: Building a security roadmap and team from scratch" In this video you will get to learn typically what does the first security hire look like, what are the early and formative steps they take when building out the roadmap and what strategic early hires do they make when scaling out the program. If you or your company are thinking about making a Head of Security hire in 2024 and would like some more advice past this video, feel free to shoot me an email directly on tom@coderedpartners.com https://lnkd.in/g4hbV7vp #hiring #securityleader #startup #bsidessf

Does working with your current computer company feel like being on a bad date? 💔 Do they ignore your calls and requests… Avoid picking up your calls or refuse to call you back… Aren’t engaged when they finally do answer… If so, it’s time to break up with bad IT and move on to something better. You deserve an IT provider that values your business and is committed to helping you succeed. 📲 Click the image below to download our FREE guide, "15 Key Questions You MUST Ask Before Hiring Your Next IT Company":

Ethics & Integrity in Business

Yesterdays Crowdstrike & yesteryears issues with Boeing, do these point to fall offs of cost cutting measures & lack of competency in handling complex technical issues and desire to reduce time to market? I think so. A bugged update is given & its detected in no time after the outage! This questions the 'Testing procedures' employed. Cyber security is such a big issue that warrants deep testing before deploying. In a product design cycle, testing takes 25% time spread over the 'concept to delivery' period. Competency of personnel is an important issue. Young generation chases pay scales & jump around. We will now start mentioning 'Person below 45 need not apply' in our recruitment ads.

Ensure Integrity with TestInvite's Advanced Monitoring & Proctoring! - (Do this): Use advanced monitoring and proctoring to ensure secure and reliable assessments. - (Not that): Avoid using outdated methods that can easily be bypassed by tech-savvy candidates. By following Testınvite's security guidelines, recruiters can make the best hiring decisions based on reliable and secure assessments. #SecureTesting #TestIntegrity #BestHiringDecisions #TestInvite #Proctoring #AssessmentSecurity #HRTech