Writing
Posts on leadership, cybersecurity, and AI governance from the CISO seat at the National Football League.
Implement Network Segmentation
Implementation of network segmentation can help create barriers that prevent attackers from easily moving laterally across the network in the event of a breach.
Regularly Patch and Update Software
Ensuring that all software, including operating systems, applications, and firmware, is kept up-to-date with the latest patches and security updates is critical for preventing…
Enforce Least Privilege Access
Implementing the principle of least privilege ensures that users are granted only the minimum level of access necessary to perform their job functions.
Secure Cloud Environments
As organizations increasingly adopt cloud services, securing cloud environments is essential to protect sensitive data and assets.
Strengthen Insider Threat Programs
Insider threats can be as damaging as attacks from external sources. Boards should ensure their organizations have robust insider threat programs that include continuous…
Enhance Vendor Risk Management
Effective vendor risk management is crucial as third-party services often access sensitive company data.
Prioritize Security in Digital Transformation
As organizations undergo digital transformations, incorporating security from the start is crucial.
Establish Clear Cybersecurity Communication Channels
Clear and efficient communication channels are essential for effective cybersecurity management.
Implement a Change Management Process
Effective change management is critical to maintaining cybersecurity. Boards should ensure their organizations have robust processes to manage changes in technology, procedures,…
Foster Security Innovation
Encouraging innovation in cybersecurity can help organizations stay ahead of threats. Boards should promote a culture that values creative approaches to security challenges, such…