Taz Wake, Discover and Read the Best of Twitter Threads by @tazwake

Taz Wake

tazwake

GDPR #infosec question. If, during internal audit you discover a sensitive data folder has weak permissions so any employee could have accessed its contents, would you give the ICO an

If you are doing Incident Response and it feels like everything is getting out of hand, the single best thing I can suggest is SLOW DOWN.A few incidents this week

Threat Hunting is the current "Hot Sexy" topic in defensive infosec. It is good and if your org is mature enough, it can be really valuable.However, *please* remember to turn

Yesterday @UK_Daniel_Card started a good thread about the role of the CISO in organisations.It got me thinking about a few things. First, is "security" a respected profession in a meaningful

As follow up to my thread asking if "security" is a profession.In the tweet from @UK_Daniel_Card one of the discussions was around what impact a CISO has (reporting to CIO

Genuine question - is it possible for people to get training or experience in "Intelligence" work without joining the Military or Police first?Are all people doing corporate "Intelligence" type work,

Is there a skill shortage in infosec? Are we failing to bring new people in? It may sound contradictory but I think the answers are "no" and "yes" in that

Just a reminder, if you are dealing with a security incident you really can't rush it. IR can take time. If you rush, you'll get it wrong. Everyone gets stressed

so about 7 months ago I rant-tweeted about orgs not really valuing security. I think its time to repeat rant.In a discussion with one of the people I really respect

I am not drawing any conclusions from this but it is interesting to note that the overwhelming majority of US "Covid19 Protestors" are white and *appear* to be in a