Read on Twitter
1/ I have been running startups and out of managing IT projects for about 5 years. Dove back in last week and it is like nothing has changed except the faces and place. Security architect is a different lens, but good IT hygeine is good security hygeine.
2/ This position would have been a big step up for me and might have been out of my depth the last time I was working on similar projects. Now, it's not quite a cake walk, but I feel confident in a way I never really have running startups.
3/ So much of security comes down to doing IT right. Having a sane inventory and reliable change management processes and documented procedures is honestly at least 50% of it. It's an easy but very expensive corner to cut.
4/ One thing that seems clear in this role is that #infosec can be a change agent for the business IF a solid business case is there, and infosec initiatives are closely tied to business objectives.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
