Christopher Orris’ Post

"Excited to share the recording of our recent live session! 🎥 For those who missed the live broadcast, you can now catch up and watch the full video here: https://lnkd.in/eupM6tPY Dive into insightful discussions and valuable insights that you might have missed during the live event. Don't miss out on this opportunity to learn and grow! #livestream #recording #video #catchup"

Incident Ready? How well are you prepared? During the #independenceday2024 holiday week, we had the opportunity to enjoy the film #TheBlueAngels. After the awesome inflight imagery, the theme that next impressed me was the level of effort and preparation they take to their craft and profession. They map out their full show, and rehearse, rehearse, rehearse. The Number 4 (slot) pilot sees everything, and with the aid of the ground observers, provide a "ground truth" feedback. They extensively debrief every practice and performance. Their #egos are secondary to the team. For the #ciso and #incidentresponders, you can apply the same rigor to your #cybersecurity #incidentresponse. I see many organizations who have an #incident plan, but rarely exercise it in the manner necessary. Precision counts when the pressure is on! At Inversion6, we help organizations large and small test and exercise their response plans with our #tabletopexercises performed by our team of #cisos. We can help you get your #incidentresponse flight ready. https://lnkd.in/e_iDdqyk

Security is reality 🌱 professional guidance 🧭

I posted last week about making it easier for developers to 'get it right.' Clint Gibler and Scott Behrens dove into the secure building block and guardrail concept below. Netflix has championed this approach for years, and Scott shares the realities and challenges of implementing a "Paved Road".

📣 Building Paved Roads in AppSec: Insights and Strategies The concept of "Paved Roads" is gaining traction in AppSec as a way to balance security and developer productivity. If you're exploring how to create secure-by-default environments without slowing your teams down, this webinar recap is a must-watch! Here’s what was covered: 🔹 Common Pitfalls: Key challenges to anticipate when building secure guardrails. 🔹 Validation Techniques: How to ensure your security controls work as intended. 🔹 Developer Enablement: Ways paved roads can reduce friction and unlock innovation. This discussion highlights practical steps to make security an enabler, not a blocker. By guiding developers with well-supported solutions, teams can reduce vulnerabilities while maintaining momentum. 💡 Takeaway for AppSec professionals: Creating scalable guardrails is about collaboration, thoughtful design, and ongoing validation. Tools that integrate seamlessly into developer workflows can play a significant role in achieving this balance. 👉 What strategies have worked for your teams in implementing secure defaults or similar approaches? #ApplicationSecurity #SecureCoding #DeveloperExperience #Semgrep Anhel Alickovic Oliver Kopitz 🇺🇦 Clint Gibler Nadeem Ahmed Tanya Janca Amanda McCarvill Luke O'Malley

Hackers taking control of trains isn’t just sci-fi—it’s a real threat to the highly connected rail networks. BBC's new Nightsleeper mini-series highlights this chilling reality. This dramatization is more than just a show—it’s a reminder of what’s at stake. The Foxguard global rail OT cybersecurity practice is dedicated to protecting #Railways from evolving threats. Let’s work together to keep our rail systems secure. Watch the Nightsleeper trailer here: https://lnkd.in/gmSTC7kJ #RailCybersecurity #Foxguard #RailOTCybersecurity #SafeJourneys

Your instincts during an active shooter is to rush to the scene and help. But this is the wrong response. Find out why in our newest blog post: https://lnkd.in/eNuBGf6T

📺 𝐓𝐡𝐞 𝐃𝐢𝐟𝐟𝐢𝐜𝐮𝐥𝐭𝐲 𝐨𝐟 𝐁𝐮𝐢𝐥𝐝𝐢𝐧𝐠 𝐚 𝐏𝐚𝐯𝐞𝐝 𝐑𝐨𝐚𝐝 & 𝐖𝐡𝐞𝐫𝐞 𝐭𝐨 𝐒𝐭𝐚𝐫𝐭 In case you missed it live, here's my chat with Scott Behrens, who is the strategic tech lead for all of Security, Privacy, and Risk at Netflix. We discussed: 🔹 What are some gotchas if you’re trying to build a Paved Road at your company? 🔹 How do you validate that your Paved Road / security control guarantees actually do what you expect them to? 🔹 And tons of audience questions. Let me know what you think! Also, I'm curious about your lessons learned, challenges, etc. regarding embracing "secure by default" / guardrails / "Paved Roads". https://lnkd.in/gG6qZaF5

Your #TelecomsSecurityAct journey doesn't need to be complicated, sometimes all you need is a simple solution! :) https://lnkd.in/eJCF5jS4 Do you agree? #BeyondCyber #GovernanceMatters #TSA #FridayHumour

Is your security organization thinking about implementing “Paved Roads?” Check out this talk with Clint Gibler and Scott Behrens from Netflix that goes through lessons learned on scaling a modern security program!