Cybersecurity

Microsoft’s new advice for securing Active Directory does customers a disservice by focusing on the wrong things. Tomorrow’s “Zero Trust” and Azure roadmaps won’t stop today’s ransomware epidemic. Enterprises need to protect the Active Directory they’ve already got.

Drift metrics can help measure how well-managed an enterprise’s technology assets are. CISOs can mine data contained in mainstream cloud configuration tools to understand conformance or divergence from expected states.

Digital crime is on the rise. To defeat it, defenders need to scale up, gain the full picture of risk, and heed the lessons of John Boyd.

This third post in a series about security and DevOps describes how to configure web servers with TLS.

This second post in a series about security and DevOps describes how to build hardened server images with Chef.

This first post in a series about security and DevOps describes how to bootstrap development of a virtual test server.