The AVG and IB

The AVG and IB

You frequently see the CISO/Privacy Officer roles combined. I did combine it myself for a while. Even though the two topics overlap, they are also very different. Because the interests (data subjects vs. organization) are apart and also the scope differs from each...
ZBO without embargo

ZBO without embargo

Originally a talk I gave at a lunch meeting with several ZBOs. ZBO stands for independent administrative body. These are the government agencies that have independent governance but belong to a ministry. That this is a complex construction, you will already...
The C in CISO stands for Compliance

The C in CISO stands for Compliance

”We are ISO certified and therefore 100% cyber-secure!” A statement that I think few security experts will endorse. And yet, compliance is an important and sometimes useful tool within information security. With the current laws and regulations, you...
Learning to advise

Learning to advise

”Gives solicited and unsolicited advice” is often in our job description. Giving advice is a skill. One which is relevant to a range of roles within information security. For (C)ISOs as well as consultants and pentesters. But how do you give good advice?...