Eric Cole, PhD, is an industry-recognized security expert with over 20 years of hands-on experience in consulting, training, and public speaking. As the founder and CEO of Secure Anchor Consulting, Dr. Cole focuses on helping customers prevent security breaches, detect network intrusions, and respond to advanced threats. In addition, he is a sought-after expert witness and a 2014 inductee to the InfoSecurity Hall of Fame.
Dr. Eric Cole is the author of several books, including Advanced Persistent Threat: Understanding the Danger and How to Protect Your Organization; Hackers Beware: The Ultimate Guide to Network Security; Insider Threat: Protecting the Enterprise from Sabotage, Spying, and Theft; and Hiding in Plain Sight. With over 20 patent applications, Dr. Cole is on the cutting edge of cyber security research and development.
Hope you feel better Eric. Regarding thin client laptops, how would one implement such policy for data rentention/storage given that most thin client laptops come with hard drives?
Yes, I agree with my predecessor. There are frameworks that can be implemented early on and help with initial steps, such as finding data, risk management frameworks (risk posture), etc. Or are these frameworks referring to compliance things like ISO 27001, CSF, and so on?
This sounds more like a cyber security framework vs compliance framework debate - CSF when implemented correctly essentially achieves what you laid out (i.e., Identify your assets -> protect the key assets). Valuable lesson though, I think compliance is one of the most misunderstood parts of cyber security.
Happy to see you recovered, I hope you feel better. Thank you for continuing to provide us great information in regards to CISOs. Also, I felt this was a part 0 to frameworks or maybe a pre frameworks video. Could you do another video where you go into more depth of implementing frameworks after a cyber foundation has been set?
Thanks for the kind words, I wonder if it is like that on your phone as well? I haven't had an issue listening but maybe its because RU-vid! I also have the episodes posted on Apple Podcast which may be better for in the car!
@@DrEricCole Hey, i just check on - my phone (android / graphene OS) with youtube & spotify, - in my car with android auto, - laptop (windows & linux) in all cases the volume compared to music is a lower. Unfortunately i don't have any apple devices so i can't validate there edit; an easy comparison is the volume during your intro (0:20 - 0:50) vs the rest of the video
Hi Eric. I really enjoy your content, however I have to say what you described was not my experience in breaking into Cyber. At least post-Covid, Cyber can be pretty tough to break into. Without experience, certs, a degree, or a combination of all four, many positions, both in person and remote, won't even call you back for an interview. Although I now work as a SOC Analyst, I did need a few certs before I started getting interviews. It also may be especially tough living in a more rural area, as there may only be a few in-person positions available. Remote positions can sometimes have hundreds of applicants. I'm sure there's plenty of people who were able to land cyber jobs without certs or experience, but I don't believe those people reflect the majority.
Thank you for being truthful and giving some real game lessons so I can learn from someone that's put in the hard work. Hope you stay blessed and can stay clear from the fake people out and about. Stay golden pony boy
Hope you're doing better with the infection - much respect for still showing up and making long form videos. That speaks a lot about being a successful CISO as well! Showing up!
Yeah, I feel like asking Christian Mcaffrey if he wants to be a Quarterback is a more apt comparison. Or asking a seal if he wants to be a a brigadier general
Very good input Eric. We must come with a solution to enable Business. Also, make understand companies that 100% secure doesn't exist. Fews of them understand. They should understand that breach will happen. Example of recent data breach:- At&T, JPMorgan Chase Bank, BBC News UK, Ministry of defence UK and recent one Neiman Marcus and more.... Thank you Eric for this lesson. 😊
Thank you for sharing this Dr Cole. This is really really really good advice. I appreciate the fact that you're teaching us the soft-side of being a CISO that is quite lacking in the market. Bless up! Do you also have advice for someone who's more into the GRC space trying to enter the CISO space? Because that's kinda who I am lololol
Thanks for the valuable information! Feel like the heart of these talks is that its relationships first. Executives won't listen unless they know you care. You show you care by listening and understanding them first. Then talking in the language they speak in to communicate your side of things.
For your own business of CISO coaching I was curious what are your thoughts of having more clients but maybe the % of people who become a CISO after training drops. Do you think it's better for business overall to have more customers or a higher % of people who get the job after coaching? Thank you for all of the videos!
Not sure if Dr Cole will reply. So just my two cents: These two are not mutually exclusive. Both can grow. Coaching doesn't have to stop once you become a CISO. If anything, Dr. Cole's experience is far more valuable once you become one. Its extremely likley that Dr Cole also has a coach or mentor and benefits hugely from it. Even at his level
