CISO HUB

“After a decade of investment and innovation, the time has come to shift from capability development toward outcome-driven cybersecurity readiness. That is where the board needs to step in.”

Virginia Gambale
Founding Member, Informed Defenders Executive Council Board Member, JetBlue, and Nutanix

Read Virginia's Article

Achieve cyber excellence with a threat-informed defense.

Move from a reactive to proactive security program that is truly strategic. Automate how you validate and assess controls, then unite red, blue, and risk teams to share intelligence. By operationalizing a purple team culture, you get the power of a threat mindset–constant learning and improved program effectiveness.

Featured Content

Think Bad, Do Good with Rob Hornbuckle

In one of the most illuminating podcasts yet, Rob sits down with Jonathan to outline his vision for leadership development and success in security. Tune-in and read on for more.

How to Pitch Your CFO on Automated Security Control Validation

Three ways to pitch your financial leader on why you need an automated security control validation platform.

Six Success Tips for New CISOs

Cybersecurity has become a board-level issue for many companies, and it is increasingly crucial that the role of the CISO evolves as quickly as the threat landscape.

AttackIQ is your wingman for real-time, data-driven visibility into the effectiveness of your security program.

Learn More

Lessons Learned: The Journey To Becoming A “Threat-Informed Defense” Organization

Fireside chat with Marlys Rodgers, CISO and Head of Technology Oversight at CSAA Insurance Group, and Julie O’Brien, CMO at AttackIQ

How do you operationalize the concept of “cyber excellence” in your organization and move your program from being reactive only to both proactive and preventative? Learn how to evolve your technology stack, team structure, and processes to better understand and share threat intelligence, then act on it. In this fireside chat with Marlys Rodgers, CISO of CSAA Insurance Group, you will learn how her team moved from a defensive to offensive and strategic cybersecurity program.

Watch Now

Watch

Cybersecurity Warfare: An Interview with Neal Bridges and Carl Wright

Why aren’t security teams realizing that we’re not simply defending against threats—we’re in a cyberwar against the enemy? Immerse yourself in a lively discussion between cybersecurity guru Neal Bridges and AttackIQ CCO Carl Wright as they discuss how CISOs should react to the current cybersecurity climate.

Clayton Chandler: Strategies for Building Operational Resiliency

Learn how Clayton Chandler, the CISO of Credit Suisse, thinks about operational resilience and strategies to assess gaps and drive enhancements to the overall security posture of the bank.

Adopting a Threat-Informed Defense with AttackIQ Vanguard

In this episode, Uma and Jonathan discuss the practice of a threat-informed defense and how organizations can use real-time performance data to optimize their security program performance and make the most of their security investments.

Read

Discover new strategies for generating an effective cybersecurity program.

CISO Guide to MITRE ATT&CK in the Energy Sector (Resource)

The CISO's Guide to MITRE ATT&CK® in the Energy Sector

CISOs in the energy sector can enable an always-on approach to security validation that’s focused on the most important threats and designed to ensure security controls are continually optimized.

CISO’s Guide to Cybersecurity Readiness

CISOs need to prepare their security teams to “assume breach” and ensure optimal readiness. Discover how to do it, and find out how automated vs. manual testing will save your organization time and resources in the process.

Is Your Healthcare Organization Following These Four Ransomware Best Practices?

Cybersecurity expert (and skydiver) Tracy Cohen shares 4 key best practices to significantly increase protection against ransomware in the healthcare space.

Listen

Hear from thought leaders in cybersecurity on successful strategies from top companies.

How to Achieve an Assume Breach Mindset

Brett Galloway, CEO of AttackIQ, joined The Tech Talks Daily Podcast to discuss how security leaders can build a comprehensive defense-in-depth strategy to confidently report to their boards, auditors, and leadership teams the strength of their security posture.

Think Bad Do Good with Christopher Frenz

Adopting a Threat-Informed Defense: A Talk with Christopher Frenz

In this episode, Christopher and Jonathan discuss the zero trust security model and look at how to achieve an evidence-based security program by adopting a threat-informed defense in the hospital sector.

Ransomware, Security Readiness, and Resilience: A Talk with Ted Harrington

Hear a discussion with Ted Harringon, author of Hackable: How to Do Application Security Right, about the way adversaries today think, how to prepare for an attack, and how to live a purposeful career in leadership and public service.

Engage

Join industry peers for discussions on top considerations.

AttackIQ Purple Hats 2022

Founded by AttackIQ, Purple Hats provides access to globally recognized experts, technical content, and innovative techniques for improving your cybersecurity posture and building a stronger, more collaborative team.

Solution Showcase

Join a demo where product experts showcase key AttackIQ Security Optimization Platform features and answer questions live.

Hacking Your Security Behaviors: CISOs Share Best Practices for 2022

While there was no playbook to navigating cybersecurity amid a pandemic, there are a few key takeaways on what it means to lead effectively that can serve as a guide not just to security teams but the enterprise as a whole in the year ahead.

Meet the Informed Defenders Council

Established with the goal of sharing transformational technologies, organizational skills, and defense best practices, the Informed Defenders Council is comprised of cybersecurity and technology leaders from 8 different industries.

Learn more about these influential members that are helping shape the future of cybersecurity.

Learn More

Free Training — AttackIQ Academy

Upskill your team for free with cybersecurity courses featuring expert-led instruction and hands-on labs and exercises.

Join Academy Today!