Richard de Vries

2024

Management / Threat Intelligence / Vulnerability Management

Running an effective and efficient Enterprise Vulnerability Management program

Running an effective and efficient Enterprise Vulnerability Management (EVM) program requires much more than simply conducting vulnerability and compliance scans. Relying solely on these scans and basing your reporting entirely on the findings can severely cripple the program’s effectiveness. In essence, this approach floods the organization with an endless list of vulnerabilities and tasks, creating more noise than actionable outcomes, which leads to inefficiencies, frustration, and even increased security risks.

September 29, 2024
Security Operation Center / Threat Intelligence

Increasing SOC’s effectiveness with well-defined use cases

The SOC is pivotal in protecting an organization’s digital assets, acting as the nerve center for detecting, investigating, and responding to cybersecurity threats. However, the SOC’s effectiveness is drastically improved with well-defined use cases to guide its operations. A use case provides the SOC with a focused, structured scenario or specific problem to address, ensuring its activities align with the organization’s unique threat landscape and security priorities.

September 15, 2024
Management

Can you truly measure the strength of your cyber defenses?

In today’s digital landscape, cybersecurity is no longer just an IT concern; it’s a fundamental priority for organizations across all sectors. The increasing frequency and sophistication of cyber threats have made the need for robust cybersecurity measures more urgent than ever. But how can you truly measure the strength of your defenses?

August 17, 2024
Management / Threat Intelligence

Which type of CISO are you?

As technology proliferates, adversaries’ capabilities escalate exponentially. While adversaries can concentrate on mastering a specific technology, defenders are burdened with safeguarding against all potential attack vectors. This equilibrium has long been disrupted, leaving us to grapple with its consequences. In light of this reality, the pertinent question arises: where do we go from here?

March 24, 2024
Management / Threat Intelligence

Risk Management — It might be more complex than you think

In the dynamic landscape of cybersecurity, the continuous influx of vulnerability disclosures and the rapid dissemination of the latest TTPs through various channels pose a significant challenge for CTI specialists. In cybersecurity risk management, identifying and assessing relevant cyber threats are critical tasks, and effective strategy must be employed to navigate this constant flow of information.

March 17, 2024
Architecture / Management / Security Operation Center / SOAR / Threat Intelligence

Establishing a Cybersecurity Citadel: Forging a Digital Fort Knox

In an era dominated by digital landscapes, where technological advancements continue to reshape how we live and work, the paramount importance of cybersecurity cannot be overstated. As organizations and individuals become increasingly interconnected, the threat landscape evolves in tandem, necessitating a robust and adaptive defense strategy.

February 23, 2024
Architecture / Security Operation Center

It’s all about the data

A robust monitoring service, integral to the operations of the IT Security department, is contingent upon the seamless and punctual ingestion of event and flow data. The significance of this timely acquisition cannot be overstated, as it forms the bedrock for proactive threat detection, incident response, and overall cybersecurity resilience.

February 16, 2024