How CISOs Explain Security to the C-Suite

After the latest Microsoft Ignite conference, the enduring dilemma of how CISOs explain security matters to the C-Suite bubbled to the surface again. How technical do you get?

Also, when the latest and greatest demos are given at one of the world’s most premier technology show, it can be easy to get overwhelmed with fancy new tools. What’s more important is to remember the basics: patching, least privilege, incident response, etc.

Other articles discussed:

Engineer fined for not disclosing a vulnerability responsibly
Young Mirai botnet authors avoid jail time
Is public shaming bad security a good idea?

Tool of the week: cspparse - A tool to evaluate Content Security Policies

Panelists: Cindy Ng, Kilian Englert, Matt Radolec, Mike Buckbee