Justin Lam

VM remains a cornerstone of preventive cybersecurity, but organizations still struggle with vulnerability overload and sophisticated threats. Tenable’s new Exposure Signals gives security teams comprehensive context, so they can shift from VM to exposure management and effectively prioritize high-risk exposures across their complex attack surface. http://ow.ly/oGFk105PbnX

3

If you are in the #insiderrisk #insiderthreat space or you find it interesting, this is indeed the conference you MUST attend! Please find registration information below and stop by our booth! #cybersecurity #zerotrust #dtexsystems #insiderrisk #insiderthreat

2

What would it take for SailPoint to go public again? Bloomberg and Michael Novinson at ISMG did some solid reporting in the past week, breaking the news that Thoma Bravo is in the early stages of taking SailPoint public again. > Already?! They've only been private for two years! I know – this seems like it's defying the odds for a normal private equity transaction. It's defying the odds of the current IPO window, too. There hasn't been a traditional IPO for a pure cybersecurity company for 1,099 days and counting. SailPoint is anything but typical, though. I'm not convinced they even needed to go private. Here's what it would take to go public again: → Profitable growth and scale SailPoint was sitting at $495.4M of revenue (TTM), $429.5M of ARR, and 31% revenue growth as of their last public earnings report in June 2022. Its net income was -$61.6M as of FY'21 year end. Roughly speaking, the current IPO expectations are $500M+ revenue scale, 20%+ growth, profitability, and a clear path to $1 billion. If we project out SailPoint's revenue since going private at 30% growth, they're likely approaching $1 billion in both ARR and total revenue. This might be generous, but they're getting close at anything over 20%. Their losses got out of control, but they're in good shape if they can get net income back to pre-2020 levels (-$10M or lower). → A good story around their ability to compete with Okta, CyberArk, and Microsoft The narrative for a SailPoint IPO is pretty good right now: there is a unique opportunity in the identity security market right now. SailPoint is well positioned to capture it. Under Thoma Bravo's ownership, they've acquired PAM and third party access companies. This matches Okta's entry into the PAM market and puts them in a position to compete with CyberArk in some market segments. I'm a little surprised they didn't try to add SSO to complete the narrative of being a full workforce identity platform (and fully compete with Okta). They were in the middle of their transition from on-premise to SaaS (which probably drove them to go private). I've heard good momentum on SaaS adoption for new implementations. This has to be part of the narrative if they're going to go public again. → No strategic buyers at a higher price than an IPO A strategic acquisition seems like a long shot. At a $6.9 billion acquisition price in 2022, a strategic acquisition might require close to $10 billion – otherwise, an IPO could be a more attractive exit. Large and mega-cap tech companies are the only buyers who can realistically absorb an acquisition of this scale. Palo Alto Networks, CrowdStrike, and the rest of the pure cybersecurity companies aren't doing this big of an acquisition. There just aren't many buyers. I don't see SailPoint wanting to move to another private equity firm, either – there's too much mutual respect between Thoma Bravo and SailPoint for that. The only option here might be to go public.

65

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/9yeq105M2RV

4

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/4wMB105OfpG

7

Supply Chain risk is a topic that's critical to the success of a CISO in the enterprise space. The SoCal CISO Community will be diving into this topic at their December 3rd CISO Summit, led by: Virginia Lyons, SVP, CISO, Sony Pictures Entertainment Webb Deneys, SVP, CISO, Cardinal Financial Company Sunil Agarwal, CISO, VP Information Security and Risk Management, OSI Systems Kelly White, Co-Founder & CEO, RiskRecon - A MasterCard Company Intelligence-driven decisions and actions are often embedded into the enterprise security fabric, with defenses against malware, malicious sites, and application attacks updated based on rapid deployment of intelligence-based rules. In contrast, most third-party risk management programs are rooted in episodic, questionnaire-based assessments which, according to RiskRecon surveys, are trusted by less than 20% of third-party risk teams. Join this session to discuss: -Gaining full visibility into risks across the entire supply chain using advanced analytics and AI -Effective strategies for utilizing intelligence to manage and monitor business partners -Actionable steps to overcome resource challenges and scale risk management efforts Apply to participate below! #evantaciso #socalciso #supplychainrisk

20

2 Comments

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

In today's sophisticated threat landscape, data is both a valuable asset and a potential liability to the business. Rapid advancements and adoption of new technologies, increases in data complexity, and expanding regulatory oversight all pose significant challenges for security leaders. However, as the landscape evolves, so does the opportunity for CISOs to securely enable the business. On September 25th, join your SoCal CISO Community peers for dinner, drinks, and discussion focused on: A New Era of Data Governance -How have advancements and adoption of Generative AI and ML tools impacted your data governance strategies? -How do you leverage data security and governance as a business differentiator and value-driver? -What are proven strategies for implementing DLP measures to mitigate risk and ensure regulatory compliance?    The Risk vs. Value Balancing Act -What factors do you consider when balancing the risk and value of data within an organization? -How do you demonstrate data security as a business priority, not just a technology priority within your organization? -Limited cross-functional collaboration is a common barrier to realizing value from data. What strategies can CISOs employ to foster a security-centric culture within their organizations? Big thanks to our Discussion Leaders for helping lead this conversation: Rosalia H., CISO, Topgolf Richard Yun, C│CISO, CISSP, CCSK, CISO, Masimo Jeff Wade, Global Cybersecurity Director, Taco Bell Mike Brown, CISO, loanDepot and Apply to participate below! #socalciso #evantaciso #infosec #datagovernance

10

1 Comment

Understanding your SPRS score is critical for NIST 800-171 compliance, but managing it can be complex. Victor Cich, Compliance Consultant at RADICL demonstrates how our platform’s live score calculator gives you real-time updates as you assess each requirement, making compliance tracking easier for your team. Check out this clip to see how our platform simplifies compliance management. How do you ensure your team stays on top of compliance? #SPRS #ComplianceTracking #NIST800171 #CyberSecurity #RADICL #DefenseIndustry

4

Cribl and Anvilogic present: Three steps to a security operation that doesn't lock you in: Step 1: Own your SIEM pipeline with Cribl Step 2: Own your SIEM data in your security data lake Step 3: Own your SIEM analytics with Anvilogic With multiple supported data platforms to choose from, your team can maximize detection coverage while cutting costs and avoiding disruption. That's an exciting alternative to SIEM platforms that want to own all your data. Read more about our partnership in the comments, or visit us this week at CriblCon!

147

20 Comments

Haven't read a Gartner Report line by line for quite sometime but this one worth the time. "Less than 10% of respondents whose organizations have E5 licenses think they are getting full value from their investment in Microsoft 365, while 56% of respondents whose organizations have E5 licenses think they are getting no value to some value from investment in Microsoft 365. This may result in overspending for what is effectively shelf-ware." "If data security and governance controls are not appropriately orchestrated in a timely manner, M365 Copilot can introduce or compound data exposure risks that could cause irreparable business, financial and reputational harm to the organization."

16

In less than two week's, CISOs from the largest organizations in SoCal will be uniting once again to discuss shared challenges within the role. Join the December 3rd CISO Summit to engage with your peers on important issues like "Cyber Resilience in Times of Geopolitical Conflict." As global tensions rise, coordinated cyber-attacks are impacting organizations globally. Cyber-conflict isn’t just a security problem, it’s a business problem that requires a strategic partnership between CISOs and leaders across the enterprise. Join this peer-led conversation to discuss: -Gauging the business’ appetite for risk amidst geopolitical unrest -Engaging leadership to make informed cybersecurity risk decisions -Identifying and responding to politically charged TTPs Discussion Leaders: Jeremy Smith, VP, CISO, Avery Dennison Eddie Galang, CISO, Port of Long Beach Matt Crouse, CISO, Solar Turbines #socalciso #evantaciso

7

4 Comments

Map your ACET to NIST 2.0 and ensure coverage with both!

8

In my latest episode, Okta CEO Todd McKinnon dives into the essential lessons he’s learned on high-stakes decision-making, managing up to the board, and competing against tech giants like Microsoft. Todd also reflects on his journey to founding Okta, his bold choice to team up with a co-founder he hardly knew, and the motivations that have fueled him for over seven years as a public company CEO. Some key takeaways… → How founders can strengthen board communication Early on at Okta, Todd recalls making the mistake of being too passive with the board. He would present issues and ask for input rather than confidently sharing his decision-making process and a clear plan. This approach was ineffective, as the board expects the CEO to lead with clear direction, not to use meetings for brainstorming. He realized the tone needed to shift to, “Here’s what we’re doing, the thought process behind it, the risks and opportunities, and potential ways we might pivot.” Effective board communication involves presenting a well-thought-out course of action, potential risks, and future pivots, rather than merely seeking opinions on challenges. → Okta’s approach to high-stakes decisions One tactic that has worked well for Okta is setting up two teams to present opposing views on big decisions. For example, if they were considering an acquisition, even if Todd was in favor, one team would argue why it’s an excellent idea, while another would argue against it. Each team spends an hour presenting their case, helping to achieve a balanced perspective. Okta uses this approach for product direction, prioritization, people moves, and other compounding decisions. → Focusing on customer value to survive In Okta’s third year, the team struggled to meet expectations, missing a key quarter and facing challenges while trying to raise their Series B. Despite limited signals of success, Todd realized the importance of focusing on true customer value, which he sees as the only reliable indicator of long-term viability. The following quarter, Okta experienced a modest breakthrough, slightly surpassing the sales target and marking a tipping point as market demand began to align with Okta’s vision. Since then, Okta has continued to thrive—even as a single-sign-on product facing intense competition from tech giants like Microsoft—proving the company’s resilience and the strength of its product-market fit. Full episode: https://lnkd.in/dDxbCTiq

91

The best way to see why Cado Security is the leading platform for Cloud investigations is to try it for yourself. Join our upcoming CTF on the 30th October. #dfir #incidentresponse #cloudsecurity #aws

4

Register now for #PhosphorusLIVE! In this episode, Phosphorus Cybersecurity Inc. CISO John Terrill will demonstrate real xIoT hacks to show why we need to think about Cyber-Physical Systems differently. https://okt.to/q57Su4

9

🎂 And because it's our partnership birthday... Expel 🤝 modePUSH...two of the best in the biz are teaming up! This partnership helps modePUSH customers not only recover from data breaches, but also build a comprehensive security strategy to prevent future incidents. Learn more: #expel #LinkedInCommunity #partnerships #modepush

5

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

171

9 Comments

🎉 BIG NEWS! 🎉 We're thrilled to support U.S. Federal agencies who are ready to unlock low- to no-code Identity automation with the addition of Okta Workflows to our FedRAMP authorization package. You can read more about our ongoing commitment to streamline burdensome and time-consuming tasks for the government workforce in my blog: https://lnkd.in/gdE-cTSE

240

2 Comments