@k3strel

CEO of RiskRecon, cyclist, skier, father, friend

riskrecon.com
Joined April 2009
  • Tweets97
  • Following116
  • Followers202
8Media
CEO of RiskRecon, Kelly White, Weighs in on Vendor Risk Management. hubs.ly/H0cZc7j0
1
2
6
Two reasons why publicly endorsing your vendors is not risk-free. 1) Some customers who publicly endorsed httpx://247.ai where falsely accused by the media of having their data stolen. 2) It creates an attack map for hackers. blog.riskrecon.com/online-ve…

Public Customer Vendor References – Good Partnership but Risky Business

A public testimonial from a satisfied customer is marketing gold for most any business. Who isn’t proud to display the logos of respected brands on your customer list, or to publish case studies...

blog.riskrecon.com
You can outsource your systems and services, but you can't outsource your risk. Here is a summary of the third-party cyber security risk regulations. #thirdpartyrisk blog.riskrecon.com/you-cant-…

You Can’t Outsource Risk - A regulatory guide to third-party cyber security risk management

While you can outsource systems and services, you cannot outsource your risk associated with that data and how it’s managed. Regulators have been consistently and clearly giving that message for...

blog.riskrecon.com
You can outsource your systems and services, but you can't outsource your risk. Check out the RiskRecon study of how companies are managing third-party risk. Pretty cool stuff. thirdpartyplaybook.com
1
2
"Risk is the probability that the choices I make today negatively constrain my ability to make choices in the future." #SIRACon2018 #saidByVerySmartPerson
5
9
Enterprise security team watching their alerts dashboard
4
185
11
311
The tendency to yell at the bug discoverer versus at the delivery of buggy software is one of the most puzzling things about IT security.
19
225
11
517
Kelly White retweeted
Vala Afshar
@ValaAfshar27 Jan 2017
Let's invest billions of dollars on advancing: Artificial Intelligence Blockchain Internet of Things AR/VR CRISPR ...or build a long wall.
9
99
3
172
"Hotel ransomed by hackers as guests locked in rooms" buff.ly/2kFzpac <- this here is REAL IoT security shit. Not DDoS nuisance
6
39
4
31
@HockeyInJune@riskrecon Actually @riskrecon has quite sophisticated analytics and scoring - worth taking a look at for managing 3P risk
Awesome insight into the amount of data publicly available for use in vendor risk management from @k3strell and @riskrecon #SIRAcon
4
4
Startups aren't hard. Stayups are hard. But what we really need is funding for a shutdown, not for a startup. (Stolen from @therealsaumil)
2
7
6
I found a Windows NT / IIS 4.0 system on the Internet today at a Fortune 100 company. I cried.
2
1
3
Slides from my keynote @IntuitIN's #Hacktober2015 event 2016: The Infosec Crossroads slideshare.net/saumilshah/20…
4
18
18
The three pillars of Information Security - Executive Support, Talent, and Agility. All else follows this. Bag the CIA Triad.
1
5
11
Good book - The Fighter's Mind
InfoSec policy 2015 item - "paper must be shredded into teenie-tiny bits so fine that they float away."
2
3
Why do I feel guilty sleeping in until 4:30?
1
1
@infosec801 Sherwood Oregon. Man lift. Chainsaw. Tall trees that must come down. Much better than #RSAC2015 :-)
Oddly, I find my Stihl stuck 30 feet up in a tree
Load more