Page 137 - CDM-CYBER-DEFENSE-eMAGAZINE-December-2018

able to to adapt and accommodate for things like knowledge gaps, miscommunication or poor training is
critical. These types of things rarely jump out on paper but become instantly apparent in practice.

While no organization is or can be perfectly secure, those that accept this as a foundational belief and
therefore focus and invest in testing and assessing their tools, processes and teams will be in the best
position going forward. While most CISOs already know this, and many I know would agree, we will only
begin to ‘unstick’ security if we can successfully convince the broader organization that changing
perspectives is important. This is the biggest challenge facing CISOs today, and is by far the most
important.

About the Author

David ‘Moose’ Wolpoff is co-founder and CTO of
Randori. Moose is a recognized expert in digital
forensics, vulnerability research and embedded
electronic design. Prior to founding Randori, Moose
held executive positions at Kyrus Tech, a leading
defense contractor, and ManTech where he oversaw
teams conducting vulnerability research, forensics
and security efforts on-behalf of government and
commercial clients. Moose holds Bachelor of Science
and Master of Science degrees in Electrical
Engineering from the University of Colorado, Boulder.
Moose can be reached online at @RandoriSecurity
and at Randori’s website, http://www.randori.com/

137