Chronicles of a CISO The world through a CISO’s eyes
- 2025 Top-20 Best CISO Blogsby JM on May 2, 2025 at 10:01 am
Chronicles of a CISO has been ranked 8th of the Top-20 Best CISO blogs on Feedspot The post 2025 Top-20 Best CISO Blogs appeared first on Chronicles of a CISO.
- RSAC 2025 NIST CSF Sessionby JM on April 30, 2025 at 12:03 pm
A recap of my NIST CSF Maturity Toolkit session for RSAC 2025. The post RSAC 2025 NIST CSF Session appeared first on Chronicles of a CISO.
- Risk Preparedness in the Age of Policy Volatilityby John Masserini on April 24, 2025 at 10:06 pm
This panel discussion, as part of the Digital Risk North America virtual event, focuses on Risk Preparedness in the Age of Policy Volatility The post Risk Preparedness in the Age of Policy Volatility appeared first on Chronicles of a CISO.
- The Virtual CISO Moment Interviewby John Masserini on March 25, 2025 at 1:57 pm
Virtual CISO Moment podcast with Greg Schaffer. We discussed the challenges facing SMBs when it comes to security and how we need to fix the model. The post The Virtual CISO Moment Interview appeared first on Chronicles of a CISO.
- 2025 Top-100 Best Security Blogsby JM on March 24, 2025 at 3:07 pm
Chronicles of a CISO has been named to the Top-100 Best Information Security blogs on Feedspot The post 2025 Top-100 Best Security Blogs appeared first on Chronicles of a CISO.
- The Compliance Equation: Preparing for Regulatory Shifts Under Trump 2025by JM on January 31, 2025 at 1:30 pm
This panel discussion, as part of the Digital Risk North America virtual event, focuses on the anticipated regulatory changes from the incoming Trump administration. The post The Compliance Equation: Preparing for Regulatory Shifts Under Trump 2025 appeared first on Chronicles of a CISO.
- Inside Out: Unveiling and Mitigating Insider Threats in the Modern Workplaceby JM on December 12, 2024 at 12:18 pm
A panel discussion, as part of the PrivSec Global event, that focuses on the complexities of insider threats, exploring the motivations behind them, detection methods and effective mitigation strategies. The post Inside Out: Unveiling and Mitigating Insider Threats in the Modern Workplace appeared first on Chronicles of a CISO.
- Zero Trust Architecture: Implementing Best Practices in the USby JM on October 22, 2024 at 1:55 pm
This panel discussion, as part of the GRC World Forums Digital Risk US virtual event, focuses on implementing best practices for Zero Trust Architectures. The post Zero Trust Architecture: Implementing Best Practices in the US appeared first on Chronicles of a CISO.
- Compliance, Due Diligence, & More: Navigating Upcoming TPRM Trendsby JM on September 13, 2024 at 8:07 pm
A discussion with Scott Lang, VP of Product Marketing at Prevalent, as we explore the emerging trends in TPRM and provide actionable insights to help you stay ahead of your third-party risks. The post Compliance, Due Diligence, & More: Navigating Upcoming TPRM Trends appeared first on Chronicles of a CISO.
- Inherent Risk vs. Residual Risk: The Foundation of Effective TPRMby JM on August 21, 2024 at 5:12 pm
An on-demand webinar around effectively managing inherent and residual third-party risks and their importance for a durable third-party risk management (TPRM) program. The post Inherent Risk vs. Residual Risk: The Foundation of Effective TPRM appeared first on Chronicles of a CISO.
- Updated NIST Cybersecurity Framework (CSF) Tool Releasedby JM on March 4, 2024 at 10:29 pm
The NIST CSF toolkit has been updated to reflect the new Cybersecurity Framework v2.0. The post Updated NIST Cybersecurity Framework (CSF) Tool Released appeared first on Chronicles of a CISO.
- The Action That Shook An Industryby JM on July 10, 2023 at 6:14 pm
The SEC has put the executives of SolarWinds, including the CFO and CISO on notice. How will this impact the future of the security industry? The post The Action That Shook An Industry appeared first on Chronicles of a CISO.
- Technology Risk in the Private Equity Worldby JM on February 22, 2023 at 4:12 pm
New regulations and business drivers are forcing Private Equity firms to take a closer look at cybersecurity risk pre & post-acquisition. The post Technology Risk in the Private Equity World appeared first on Chronicles of a CISO.
- A CISOs Guide to ESGby JM on February 1, 2023 at 3:14 pm
The term ESG has become a common parlance in the corporate world. How can a CISO leverage ESG to further their program and be better corporate citizens? The post A CISOs Guide to ESG appeared first on Chronicles of a CISO.
- Cyber Resources For Veteransby JM on November 27, 2022 at 5:04 pm
Career and education resources for those on active duty or veterans who are looking to move into cybersecurity or S.T.E.M. careers. The post Cyber Resources For Veterans appeared first on Chronicles of a CISO.