Trust but Verify: Avoiding Cybersecurity Blind Spots

Have you ever wondered why some organizations don’t seem to have problems with cybersecurity? As an example, have you ever heard about a FedRAMP certified cloud being exploited? Why are some organizations victims while others are not? The hypothesis of this presentation is that having an independent organization evaluate cybersecurity dramatically reduces an organizations vulnerability. Trusting the men and women running cybersecurity in your organization is admirable, however all people and organizations have blind spots and having an independent review provides much needed assurance. Even better would be assurance on your entire supply chain based on a common and practical approach to cybersecurity verification. This talk will focus on these questions and propose practical solutions.