PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Spotlight: Ross McKerchar, CISO at Sophos

bugcrowd.com | blog | #interview | #ciso | #leadership | #sophos | #transparency | #mdr
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Sophos CISO Ross McKerchar reflects on 17 years leading Sophos security, arguing transparency about issues builds trust better than FUD marketing, and shares how he evaluates vendors.
Published
Collected

Related coverage

blog · jfrog.com
Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
Former SolarWinds CISO Tim reflects on the historic Sunburst breach, fighting SEC charges, and securing the build pipeline against emerging AI threats.
blog · netspi.com
Q&A: Diana Kelley Discusses ROI, Application Security, and Inclusivity
Security Curve CTO Diana Kelley on communicating cybersecurity ROI through a business-profitability lens, building application security programs, and improving inclusivity in the security industry.
blog · netspi.com
The Evolution of the Chief Risk Officer
Risk Neutral CEO Jeff Sauntry on the Chief Risk Officer role's evolution, the five enterprise risk categories, and how security leaders can translate technical risk into board-level language.
blog · netspi.com
The Biggest Challenge Facing CISOs Today – and the Key to Winning
A 30-year security veteran shares lessons for CISOs: simple misconfigurations often beat advanced skills, and new senior leaders should focus on understanding the business before spending on tools.
blog · netspi.com
Challenges and Keys to Success for Today’s CISO from the Former CISO at the CIA
Former CIA CISO Robert Bigman recounts building the agency's CISO role from scratch, why governance and policy work were core duties, and how to recover from mistakes in high-stakes environments.
blog · netspi.com
RSA 2020: Three Takeaways from the Halls of the Moscone Center
Recaps RSA 2020, highlighting Rohit Ghai's call to reframe the narrative around cyber-resilience, why CISOs must bridge technical and boardroom conversations, and how intel sharing aids defense.
Back