Dec 6, 2016

Federal Government Disproves the Myth of Cyber Talent Shortage

• If the government can find and hire them - they exist
• What does that mean for the rest of us hiring?
• https://cio.gov/how-to-snag-talent-to-fill-critical-cybersecurity-positions-at-your-agency/

5 Mistakes to Avoid to Hire Qualified Application Security Talent

• Not understanding current needs
• Ignoring existing resources
• Not sharing the workload
• Not defining the role
• Overly broad job requirements
• General Idea: We say we need security talent, but we don’t step back to really understand what we actually need given our current status and resources
• https://www.jardinesoftware.com/5-mistakes-to-avoid-to-hire-qualified-application-security-talent/

Obama Cyber Security Commission to [Finally] Present Its Report

• Seems like lots of fluff. But is there any actual substance here?
• Protect, defend, and secure today’s information infrastructure and digital networks
• Innovate and accelerate investment for the security and growth of digital networks and the digital economy
• Prepare consumers to thrive in a digital age
• Build cybersecurity workforce capabilities
•  Better equip government to function effectively and securely in the digital age
•  Ensure an open, fair, competitive, and secure global digital economy
• http://thehill.com/policy/cybersecurity/308332-presidential-commission-on-cybersecurity-to-present-final-report-friday

The First Question Security Leaders Need to Ask Before the Breach Happens

• Article by Michael, gets to the heart of the matter
• Turns out, figuring out what matters is hard work
• http://www.csoonline.com/article/3146560/leadership-management/the-first-question-security-leaders-need-to-ask-before-a-breach-happens.html

Amazon Unveils Anti-DDoS Service for Customers

• The company is offering two levels of protection
• AWS Shield Standard monitors incoming web traffic for customers and uses anomaly algorithms and other analysis techniques to detect malicious traffic in real-time
• The company also announced AWS Shield Advanced, a version designed to protect against more aggressive and sophisticated attacks
• This is big news - because DDoS has become an effective tool of cyber extortionists
• http://www.wsj.com/articles/amazon-cloud-computing-division-unveils-new-cyber-security-service-1480620359