HCS ▋ @superruserr@infosec.exchange

rest of 2020 goals in mind: 📆

Pivot at the current place

Take on board another project

Actually contribute to an open source project (now that, I'm no longer involved with open source / community software)

Contribute into an online course

Pick up a whole new skill

Keep up my blog entries on hannahsuarez.me

Continue to apply and send Cfp/talk submissions

Continue on with this ruleset submissions that has been on my mind

Who moved my DNS cheese? BIND 9 DNS Log Collection and DNS Auditing https://hannahsuarez.github.io/2020/who-moved-my-cheese-dns-linux/

Looking into other cloud DNS infrastructure for a potential series. What provider do you use?

Will be attending Black Hat Europe 2021 Executive Summit https://www.blackhat.com/eu-21/executive-summit.html

If you know of any cyber security students, make sure to point them over to the Black Hat Student Scholarship programme! https://www.blackhat.com/eu-21/scholarships.html I went back in 2015 as my first conference.

#cybersecurity #infosec #informationsecurity

You haven't worked in #infosec until your employees do their information security awareness training and complete it with a Shining meme

all ok now

Something happened with Let's Encrypt https://letsencrypt.status.io/

Sir Anthony Hopkins listens to Thrash Metal https://www.youtube.com/watch?v=3g_xTAwxaKQ

The surprise I've learnt working with the "non-technical" is the challenge of retrofitting the information security program to the company strategy which in turn, retrofit to the company culture in mind. I've found myself having to go against "natural urge" and be more empathic.

Maybe it's "just checkbox work" but if you need to retrofit the information security programme w/ company strategy, existing processes are level 0 or 1 in the CMM (aka no or little established processes) and "IS = IT", they are in for an awakening. And that is why you are hired.

(Un?)surprising but a variety of small companies (50 and under) who normally would not have ISO(Information Security Officer) but are now on the look out for one. Driven by legal/regulatory and customer requirements. Good to see this but a challenge to retrofit IS to startups.

So far this week "The beatings ("recommendations") will continue until the moral (to be compliant) improves"

Add your salary and contribute to the free dataset of global InfoSec/Cyber Security salaries https://github.com/foorilla/infosec-jobs-com-salaries

https://salaries.infosec-jobs.com/

True cybersecurity means centering policies on employee behavior - Proofpoint report

https://www.techrepublic.com/article/true-cybersecurity-means-centering-policies-on-employee-behavior-report-says/

https://www.proofpoint.com/us/resources/threat-reports/human-factor

https://www.proofpoint.com/sites/default/files/threat-reports/pfpt-us-tr-human-factor-report.pdf

(rings to me, as someone who is a security policy owner and writer and manager of an ISMS)

Tired: Zero trust on employee endpoints

Wired: Zero trust on employees, all the trust in the cloud whatever-as-a-service

Work party last night was awesome

Ruin my ISO 27001 Compliance Life in one sentence.

Talking about working in #infosec to normal people: Either concerned about what their company does know about what they do on corporate laptops or relieved that measures aren't that controlled and not much security culture.

If you want to take a look at how the career framework is like, check out Dropbox's https://dropbox.github.io/dbx-career-framework/ic2_security_engineer.html (this one for Security Engineer)

Thanks @jerry for your continued work and commitment in keeping this place running!

Curated list of free courses & certifications. https://github.com/cloudcommunity/Free-Certifications

Doing an update of my CV and LinkedIn and I realized two things: I have at least six years in the IT/infosec industry (including my Masters would be at least six). Feels like time has gone fast since the day I decided to make a change in careers.

Been grateful to be able to have a dip in a few parts of infosec while also being freelance and remote this whole time.

New Humble Bundle out for #infosec

https://www.humblebundle.com/books/cybersecurity-2021-packt-books

Learn Computer Forensics, Cybersecurity Threats, Malware Trends, and Strategies, Mastering Malware Analysis, and Mastering Python for Networking and Security