Recover isn’t about disaster recovery, its about restoring business to an acceptable operating state and if we learned enough to become resilient. You’re on the final part, Recover, of my series on Building a Metrics Program using the CSF. I wrote about Govern, Identify, Protect, Detect, and Respond prior to this page, leveraging the CSF…
Another program near to me as I took over the SOC. The NIST and the CSF guided me in the ways of incident response… that and my kick-ass team who built the program with me. Without a doubt, since you are on part 5 of 6, I feel you are prepared to read more, but…
Detect directly influenced a program that I helped stand up when I was given a SOC to lead. Honestly, I really enjoyed it. It inspired me to write about it. Since you’re on part 4 of 6, I assume you’ve read about Govern, Identify, and Protect and are following on to see how deep this…
Protect should answer: Are the controls we have in place actually reducing the risks we’ve identified? You should be able to see the pattern now that as we move through these parts, that the Cyber Defense Matrix lesson comes into play. We are walking from left to right in a security sense, or from a…
This is a continuation of my CSF Actionable Metrics series. If you missed the first one, here’s the link to it. So with identify, its about Asset Management, Risk Assessments, and Improvement. This is part of my bigger series of Building a Metrics Program. Identify within the CSF is about knowing your inventory, just like…
I’m a huge fan of metrics, over the many years I’ve been doing cybersecurity, I’ve been able to prove the progress of my own work to proving the progress of my departments. From individual contributor to leader. One of the things I really like about the Cybersecurity Framework, is that its short and sweet and…
This is written as a standard operating procedure on understanding malware, the threat actors, how to prevent them, detect them, respond to them, and worse case scenario, to recover from scratch. 1. Purpose & Scope This Standard Operating Procedure establishes operational protocols for identifying, preventing, containing, and remediating malicious software (malware) infections across organizational endpoints…
Cyber Defense Matrix by Sounil Yu Executive Summary (For General Audiences) I read this book around 2022 so that I could really understand how the Cybersecurity Framework benefits the company I was working at. We were all about the NIST 800-53 and I personally felt going to the CSF was a step down. I should have…
While visiting the Philippines in 2025, we went to the Balisong District. Literally all up and down the street there are stores where the butterfly knife is sold. It is said that the district will eventually be no longer as the children of the knife makers are seeing no future in knife making. They are…
Imagine you own a million-dollar house in a great neighborhood. It features a chef’s kitchen, hardwood floors, a pool, a home theater, and a garage full of toys you worked hard to afford. Drivers slow down just to look at it. Now imagine someone out there wants to burn it down. They do not want…