This is GRC (Page 4)

13 Dec 2023 Careers

5 Horror stories about cybersecurity consultants (and how to avoid them)

Anecdotes about consulting services gone wrong in the context of enterprise information security. The core issue? A misunderstanding of how to use consulting by companies that hire them.

06 Dec 2023 Security

Why Access control is security's most critical battlefield

Telling some stories about access control failures and why access management is like cleaning up toilets.

29 Nov 2023 Emotional-Intelligence

You don’t go into cybersecurity to make friends

Stories about how I've come to embrace security's role as the "bad cops" in enterprises. My secret? Staying grounded in security's core purpose, which is to defend best practices and integrity.

22 Nov 2023 GRC DevOps DevSecOps

How to convince developers to fix their security vulnerabilities?

Presenting developers with vulnerabilities is one of the most common -and frustrating- tasks of any security analyst. Here's a list of the most common excuses developers come up with to avoid fixing vulnerabilities and how I react to them.

15 Nov 2023 GRC

How to incorporate security into your branding strategy?

Everybody claims their product is secure. Then why are there so many data breaches? Instead of promising the impossible -zero incidents!- companies should showcase their expertise and commitment to integrity.