Why do metrics and KPIs matter? Having the right metrics ensure that IT decision makers focus on the right things that are inline with the organization’s desired business outcomes. When an organization suffers a data breach or other cybersecurity incident, as all organizations inevitably do, the main question is not…

by Erkan Kahraman | on 01 DEC 2021 As the festive season is approaching I wanted to remind you of the seven notorius security mistakes which can trip you over on your journey to the clouds; so be a good samaritan and read on. 1. You’re not training your staff. Cloud skills gap is one of…

Cybersecurity awreness programs offered by third parties can be costly and most organizations lack the resources to produce their own security awareness training material. But needless to say, having a robust cybersecurity awareness training is key to the success of your overall security program as well as a prerequisite for…

by Erkan Kahraman | on 12 APR 2021 | in Best Practices, Foundational (100), Security, Identity, & Compliance, Adoption, Enterprise Strategy Cloud security strategy is like a compass for your cloud journey. It’s the organization’s chance to align its cloud security program on course to address risks and meet its…

One of the things that fascinated me when I moved to Sweden was the ease of looking up a person using an online “yellow pages” service to find out their phone number and address. This was a very useful thing when I was late for a meeting and didn’t have…

Navigating the arsenal of AWS services can be a daunting task; especially so if you are new to the cloud service provider. Service names such as “Cognito” don’t help and services don’t always do what it says on the tin. So I’ve put together this map of AWS services and resources in an effort to help security professionals in my team find the tools and resources they need. Hope it helps! Please note that this is a work-in-progress and the latest version is available (both .xmind and .png formats) on GitLab: https://gitlab.com/erkanistan/aws-security

Wouldn’t it be great, next time when you’re shopping for wine and asked to verify your age at the cashier, if a pop-up on your phone would notify you that “Systembolaget would like to access your age”? …

The EU’s general data protection regulation is “principles based” with rather broad guidelines which are open to both interpretation and misinterpretation. …