“To be an innovator, to be a leader, you have to keep challenging the status quo. You have to keep challenging yesterday's thoughts. that's what we really did when we sat down and as a team started listening to our colleagues. And taking that input to really develop out these principles, It was about challenging the way we've been doing things and really thinking about how business digitalization is changing us and our organizations” — James Christiansen
-------
Episode Timestamps:
*(2:05) - Setting the theme for the 2nd half of discussion & introductions
*(5:00) - Principle One: Challenge Your Existing Principles!
*(7:29) - Principle Two: Stop Buying Blackbox Solutions — Buy “Open and Integrated” Instead
*(10:54) - Principle Three: Focus on Five Foundational Technologies that Integrate with Your Entire Security Ecosystem
*(15:05) - Principle Four: Only Buy Cloud-Powered New Technologies!
*(18:50) - Principle Five: Protect Business Data with Security Controls that Can Follow Data Everywhere
*(21:55) - Principle Six: Prioritize Business Risk/Reward When Making Security Strategy
*(27:50) - Principle Seven: Build Threat Models and Use Them in Every Architecture Decision You Make
*(29:34) - Principle Eight: Expand Security Operations Automation
*(37:16) - Principle Nine: Demand Continuous Visibility and Risk Assessment for Every Security Control
*(41:09) - Principle Ten: Reduce Attack Surface Using Zero Trust Principles
Links