Microsoft and NIST collaborate on EO to drive Zero Trust adoption

2020s Nobelium attack sent shock waves through both government and private sectors. 2021 has already seen large-scale nation-state attacks such as Hafnium1 alongside major ransomware attacks2 on critical infrastructure. The breadth and boldness of these attacks show that, far from being deterred,...

Are You Promoting Security Fluency in your Organization?

Migrating to the cloud is hard. The PowerPoint deck and pretty architectures are drawn up quickly but the work required to make the move will take months and possibly years. The early stages require significant effort by teams to learn new technologies the cloud services themselves and new ways o...

#OTTuesday: iTV on Live Streaming the World Cup

Imagine you're iTV. One of the UK's biggest commercial broadcasters. You have the rights for the World Cup and England has made the semi-finals. The whole country is watching. How do you make sure you're meeting the gold standard of delivering a glitch-free, "TV-like experience" over the internet...

A CISO's Guide To Application Security – Part 3: Toward an AppSec Center of Excellence

This post is the third in a 4-part series on Application Security, or “AppSec”. The series will define the components of a sound AppSec program, delineate the growing threats to software, weigh the costs of a data breach, and outline the CISO’s responsibility in managing software security risk...