Strategic insights for advancing your cybersecurity career, based on lessons learned from nearly two decades in the field.

You've been building your startup from the ground up, survived the 'Valley of Death,’ and have built a team you trust. As a result, all your employees had access to basically all your valuable assets—customer data, trade secrets, and financial information. Since then, your organization has grown larger, but you didn't think about revising this lack of compartmentalization until one day, when you discovered the hard way that your most significant security threat wasn't some hoodie-wearing hacker in a basement halfway around the world. It was someone sitting right next to you in the office, maybe even sharing coffee with you in the break room.

Why the smartest risk investment might be knowing when to stop spending.

Yes, I lost my smartphone. Now that the dust is settling, I wanted to write about my experience because I believe I've learned some valuable lessons that can be easily applied to any business facing a serious incident. I'm sharing this to highlight the importance of something I often preach (but, as it turns out, still need to be fully implemented in my own life): being prepared for when an incident strikes.

A straightforward look at what it really takes to start a cybersecurity career, based on nearly two decades in the field.