This is GRC (Page 8)

26 Jul 2023 Careers Security

Why "Just hire entry-level cybersecurity professionals and train them" isn't as easy as it seems

“They say there is a job shortage. But why won’t they hire people with no experience, and train them?” I hear you. But I’m here to tell you “training” someone is not easy. Worse, it’s not just a question of dollars: it’s a question of psychological balance for people like me. Let me explain.

19 Jul 2023 ELI5 GRC

What is ISO27001 Certification?

Explaining what makes the ISO27001 standard relevant for information security professionals today. I tell the story of how I took part in an ISO27001 certification process. I share my expert opinion on how this framework can help an organization manage security in a cost-effective way.

12 Jul 2023 Hacking ELI5

How do ChatGPT and other LLMs get hacked?

Ever wondered if ChatGPT can be taken over? This post explains - like you're five - the hacks of ChatGPT and other LLMs. The silver lining? We do have the necessary tools to address AI hacking. It's now a question of whether the security community will act fast enough.

05 Jul 2023 GRC Emotional-Intelligence Security

Selling InfoSec Differently

Information security is expensive, inconvenient, and hard. Fear-mongering dulls itself over time. If you are a security representative in your organization, whether full-time or more likely part-time, influence, as a means of connection, will get you farther.

21 Jun 2023 Breaches Hacking ELI5

Who is behind ransomware attacks?

Looking at cybercriminals' motivations, recruiting tactics, and targets. How did ransomware come to operate like a software business? Plus a deep dive into who joins ransomware criminal gangs. Learn why teenage boys are often recruited.