Andrew Coyne

Cyber attackers do not all think the same—why should defenders? Latinas in cyber bring cultural fluency, multilingual skills, and sharp pattern recognition that threats do not see coming. Yet they make up less than 1 percent of the field. That is not just a gap—it is a missed opportunity. If we want security strategies that actually scale, we need to start by widening the talent pipeline. #Diversity #Cybersecurity #Culture

88

5 Comments

Jen Easterly, former director of CISA and now a strategic advisory board member for Huntress, is focusing on boosting cyber resilience for small and medium enterprises. These organizations often face sophisticated attacks but lack the resources to defend themselves. During her CISA tenure, Easterly championed initiatives such as the Joint Cyber Defense Collaborative and persistent threat hunting. These measures strengthened federal capabilities and deepened operational collaboration with the private sector, enabling rapid sharing of threat intelligence and faster mitigation of risks. In light of the shift from espionage to disruptive attacks on critical infrastructure, Easterly urges all organizations, regardless of size, to prioritize resilience - preparing for, responding to, and recovering from incidents - and to demand secure-by-design technology from vendors. "Every business, large and small, should consider themselves vulnerable. It's all about resilience. How do you understand the threat, prepare for it, be able to respond to it and then recover so that you can mitigate and drive down risk," she said. https://lnkd.in/gejpe3CB

4

Security is shifting from passive monitoring to active deterrence. Most systems are currently designed to record what happens after the fact, but this model no longer keeps pace with how quickly threats evolve. What’s emerging instead is a more intelligent approach, where analytics, automation, and real-time response work together to stop incidents before they escalate. Technology alone , of course, isn’t the answer. AI can strengthen security infrastructure, but human oversight, curiosity, and continuous testing remain critical. Organizations that assume their systems are “good enough” often become the most vulnerable. The real advantage comes from constantly evaluating, improving, and stress-testing security environments. I recently shared some thoughts on how intelligent deterrence is reshaping enterprise security and why the future will be a collaboration between advanced technology and human judgment. Learn more here: https://lnkd.in/esXdxnGz

5

Trackforce’s "2025 Physical Security Operations Benchmark Report" reveals rising turnover, wage pressure, and slow tech adoption as top challenges for security providers, while corporate teams face expanding roles and growing cyber-physical risks. The industry is rapidly shifting toward tech-enabled officers, smarter automation, and integrated platforms—key steps for building resilient, future-ready security operations. With 47% of companies not utilizing AI or automation tools, there is a lot of room for growth and our company can help bridge that gap! https://lnkd.in/euzWZdY3

13

1 Comment

I reshared this earlier, but wanted to offer more perspective on why this moment matters for security leaders. With the acquisitions of Acante and Swift AI, Concentric AI is taking a bold step toward solving a problem security teams have wrestled with for years: truly understanding and securing sensitive data at scale — with context, automation, and precision. For too long, DSPM has been relegated to the data governance shelf, while security teams leaned heavily on identity controls and legacy DLP — often without knowing what data they were actually protecting and where it was going like GenAI websites. That’s changing. A modern DSPM platform must now: • Classify and contextualize data down to the subcategory level • Enable policy enforcement based on what the data is, not where it resides • Detect and control risky data movement across GenAI tools, email, SaaS, and cloud apps • Deliver real-time remediation and guardrails — without disrupting productivity • Provide visibility and control over LLM interactions with sensitive content AI is unlocking this next chapter, and Concentric is ushering it in. This evolution is what makes the current momentum around Concentric so important. It signals a broader shift — from reactive to contextual, from infrastructure-centered to data-centered, from checkbox governance to intelligent enforcement. Security leaders should be watching this space closely. #ConcentricAI #Acante #SwiftAI #DataSecurity #DeweaponizeYourData

15

1 Comment

Incident response plans rarely fail on paper. They fail when decisions aren’t clear under pressure. This piece breaks down why, and what actually helps teams stay calm when incidents happen. Worth a read if IR still feels theoretical where you are. #FromChaosToClarity #SecurityLeadership

3

So many takeaways from my latest Deepwatch webinar! For instance: You can’t wait for alerts anymore. You have to anticipate risk, shape strategy, and shift left without sacrificing your response on the right. · MDR isn’t just triage anymore. It’s telemetry + risk insights + proactive threat hunting. · Detection is only the middle. We need more on the left (exposure management, insider risk, dark web monitoring) · And deeper integration on the right (zero-to-resolution IR, board-ready reporting) One of the most insightful parts: my role at Deepwatch, being “Customer Zero” Every new capability gets tested in-house before rollout. It’s not just theory, it’s lived execution. If you’re still treating MDR like a reactive SOC layer, you’re missing what’s possible today. Definitely worth the watch Check out the full webinar: https://bit.ly/3JfHBP8 #MDR #SecOps #ciso

16

Candidate Spotlight: Senior Risk & Governance Leader This risk and governance leader has spent their career building ground‑up programs that embed strategic oversight, disciplined assessment, and cross‑functional accountability into complex organizations. Their background blends program management, security leadership, and deep regulatory expertise across healthcare, federal, and enterprise environments. Governance & Risk Management They have architected enterprise policies, risk‑informed metrics, and audit‑ready processes aligned to NIST 800‑53r5, 800‑171, 800‑161, CMMC, HIPAA, and PCI‑DSS. Their work consistently gives executive leadership a clear, defensible view of organizational exposure and operational resilience. Third‑Party & Supply Chain Risk They bring end‑to‑end vendor risk expertise, from onboarding and inherent risk profiling to remediation and continuous monitoring. Their recent work includes maturing a federal TPRM program, integrating AI to automate risk intake, and implementing CMMC‑aligned workflows to capture deep‑tier supply chain risk. Program Leadership & Transformation Across multiple organizations, they’ve led the evolution of security programs, co‑chaired governance committees, and managed teams of analysts. They’ve owned GRC platforms, standardized assessment methodologies, and delivered reporting that drives executive decision‑making through clear KPIs and KRIs. Operational Resilience With a dual background in IT and Security, they design controls and processes that strengthen posture without disrupting operations. Their experience spans secure messaging rollouts, mobile device hardening, endpoint integrity, and executive‑level technical support. Certifications CRISC, CISSP, CISM. A seasoned program leader with the ability to build, mature, and operationalize risk management functions that stand up to regulatory scrutiny and support long‑term organizational resilience. If this aligns with upcoming needs, I’m happy to make an introduction. CyberExecConnect

10

1 Comment