PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CISO excellence story: Tomás Maldonado, National Football League

bugcrowd.com | blog | #red-team | #security-leadership | #resilience | #interview | #ciso | #nfl | #nist-csf
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

NFL CISO Tomás Maldonado secures an ecosystem of 32 clubs with a NIST CSF-mapped risk program, shared playbooks, and constant tabletop and red team testing to keep game-day operations resilient.
Published
Collected

Related coverage

blog · jfrog.com
Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
Former SolarWinds CISO Tim reflects on the historic Sunburst breach, fighting SEC charges, and securing the build pipeline against emerging AI threats.
blog · netspi.com
CISO Perspectives: Cybersecurity Budgeting Edition
Three CISOs share how they present cybersecurity budgets to the board, favoring maturity metrics such as NIST CSF benchmarking over fear-based arguments to justify spending and measure ROI.
blog · bugcrowd.com
AI lectures with Dr. Brumley Part 1 | Defining AI for CISOs
Bugcrowd's Dr. David Brumley opens his AI lecture series for CISOs by breaking 'AI' into seven distinct mechanisms — from machine learning to symbolic reasoning — each with its own attack surface.
blog · bugcrowd.com
A foundation of quicksand: How AI slop is impacting public sector security
The real public sector security crisis isn't AI slop but decades of technical debt and weak foundations that AI exposes; human researchers remain a critical force multiplier.
blog · bugcrowd.com
Inside the Mind of a CISO 2025
Inside the Mind of a CISO 2025 is a digital magazine of 10 articles on the modern CISO, focused on resilience in an AI-accelerated world, with vulnerability trend data and board-facing strategies.
blog · bugcrowd.com
Security isn’t static: Why your strategy should evolve like your threats
Security strategy must evolve in phases: gain visibility into assets, validate risk through pen tests and bug bounties, then build continuous assurance loops instead of waiting for audits or incidents.
Back