8 January 2024

How time flies.  I’ve been buried in my work lately and haven’t made the time to keep posting.  My resolution?  To try and post more frequently.  As always, these are my thoughts and mine alone.  But please reach out if you think in a similar manner. 

Like many out there, the new year is a time to reflect on what went well and what we need to refocus on for the coming days.  End of year tends to be busier for cybersecurity teams.  Lowered staff presence, end of year project close outs, budgeting, planning, and helping our business partners achieve their goals.  Like many of the diet and exercise related resolutions, its easy to get inundated with offers and “easy button” “solutions” this time of year. 

For me, this is a good time to reflect and remind myself that the basics are the key to success.  To paraphrase coach Tony Dungy, “..if we do what we’re supposed to do, good things usually happen.” The fundamentals are much more important than the easy button or the sophisticated and often complex solutions pitched.  Fundamentals such as patching, monitoring, architecting for compartmentalization of attacks, vulnerability management, effective third party controls, etc. Those are not the latest gadgets or parts of cybersecurity you hear about in movies.  But from what I’ve seen, if you focus on the basics and doing them well, good things often happen.