Chronicles of a CISO | Page 2 of 8 |

A Few Leadership Work-From-Home Tips

Mar 13, 2020John Masserini2 CommentsCommentaryCritical_Reads, Leadership

A few tried-and-true practices to keep you productive and sane while spending an unexpected few weeks in the home office.

Tech Hiring is Badly Broken

Feb 28, 2020John MasseriniCommentaryLeadership

As a hiring manager, how does someone make a person go through three video interviews, do two coding assignments, be so impressed with the coding that they then fly the person up for in-person interviews, and only then decide the coding skills aren’t exactly what they are looking for?!?

The First Anniversary of Chronicles of a CISO

Feb 4, 2020John Masserini3 CommentsCommentaryInformation Security, Marketing

Photo by Hal Gatewood on Unsplash It’s hard to believe it’s been a year already. Twelve months ago, I took the leap and decided that it was time to start my own blog, and now, here we are celebrating the 1st anniversary. Over 110,000 visits later, I am shocked, honored, and above all, humbled that this little pet…

Identity Attack Vectors, by Haber and Rolls

Dec 23, 2019John Masserini1 CommentCommentaryIdentity, Privileged Access

Honored to have had the privilege to write the forward to the third book of Morey Haber‘s trilogy of enterprise attack vectors. This installment, written with Darran Rolls, discusses the details of identity-based attacks and how to protect against them. I’ve written frequently about the necessity of adequately managing the digital identities of our enterprise…

3 Fundamental Questions to Ask of Your Identity Program

Aug 28, 2019John MasseriniMediaIdentity

This is an abbreviated version of my Identity Catechism piece that I wrote in early 2019. This piece focuses on the three key topics to focus on when planning and building an Identity Management Program. While many continue to hold onto the concept of the hardened perimeter, the stark reality is that we live in…

My Daily Cybersecurity Reading List

Jul 22, 2019John Masserini4 CommentsCommentaryCoaC, Leadership

Overwhelmingly, there is one question about cybersecurity I am asked far more than any other. What’s the best solution I’ve used? Nope. What’s my favorite conference to attend? Negative. How did I get started in Information Security? Nahh… Without question, the one thing I am asked most these days is… What do you read every…

When Security Metrics Miss The Point

May 9, 2019John Masserini2 CommentsCommentaryLeadership, Metrics

After countless years of presenting to boards, executives, and colleagues, I’ve found that I’ve developed almost a split-personality when I’m asked about what metrics to track.

Q&A with John Masserini, Global CISO at Millicom

May 8, 2019John MasseriniMediaCISO, Strategy

This is an interview with George Hulme is an internationally recognized writer who has been covering the technology and information security space for more than 20 years, with pieces appearing in ComputerWorld, Network Computing, CSOOnline and a host of other print publications. In this Q&A we spoke with John Masserini, chief information security officer at…

Two-factor Authentication Is Not Dead

Apr 1, 2019John Masserini3 CommentsCommentaryIdentity

I’ve had just about enough of the fear mongering and lazy ‘reporting’ that’s been in the press recently around how two-factor authentication is broken. I’m not sure about you, but the way the doomsday preachers in mass media have torn apart two-factor authentication lately really has me wondering about the state of journalism anymore. I…

RSA Sales & Marketing Panel on Relationships

Mar 21, 2019John MasseriniMediaMarketing, RSA, Vendors

For a number of years, I’ve had the honor of participating on the T.E.N. ISE® Sales and Marketing Breakfast panel at RSA. This year’s panel included some of my most esteemed colleagues in the industry and was once again a packed house with over 100 vendor representatives. The idea behind the panel is to provide…