Every organization operates a networked ecosystem of suppliers, customers, internal sites, and governance bodies connected via a digital network. How does network reputation provide insight into an organization’s security posture within the ecosystem and provide investment incentives to improve its posture? What parameters are useful in establishing a network reputation metric and how can machine […]

Professor Larry Gordon of the University of Maryland Discusses the Gordon-Loeb Cybersecurity Investment Model in this interview with ActiveCyber. Learn how economics, cyber, and mathematics came together at the genesis of this model and how to use this model to guide your cyber investment strategy. I was delighted when Professor Gordon invited me to lunch […]

How Much Should I Invest in Cybersecurity? What Technology Should I Invest? Organizational risk managers and CISOs are faced with a seemingly bewildering set of investment choices and decision methods for determining the monetary amount and best technical options for cybersecurity investment. Cybersecurity investment business cases are often hard to justify since cyber operations usually […]

Matt Barrett of the National Institute of Standards and Technology (NIST) Discusses the NIST Cybersecurity Framework and Adaptive Cyber Defenses. Learn how the Framework is evolving and how your organization can use it in this interview with ActiveCyber. Matt and I crossed paths at a conference many years ago and I have always held his […]

Cloud Access Security Brokerage

One of the fastest technology growth areas for cloud security involves what is known as a Cloud Access Security Broker (CASB). At my last count there are over 20 vendors that currently occupy this market space, which only emerged from the lab in 2010/2011 [See the non-comprehensive list of vendors at end of this article]. […]

Discover How Splunk Can Help You Build Active Cyber Defenses: Rob Frazier, Certified Splunk Architect and accomplished security professional reveals how Splunk can play a vital role in combating threats as part of active cyber defense in this recent interview with ActiveCyber. Rob and I first met in the early 1990’s when we were co-workers […]

Bob Gourley Provides Forecasts and Recommendations for Active Cyber Defense: Bob Gourley of Cognitio and former CTO of DIA talks about the key trends impacting cybersecurity and how active cyber defense can play a role in this recent interview with ActiveCyber. I recently connected with Bob Gourley at a cybersecurity conference and, knowing his reputation […]