Hi. I'm Erick. I help technology and risk teams thrive. At work, I've been a CISO, an author, a CTO, a hacker, an ally. If I think I have something interesting to say, I like saying it here.
The role of the CISO is ultimately to own security culture of the organizations which we serve. Adopting the vocabulary and winning business methods of our companies and industries can create a profound linkage and demonstrate alignment that rises above the CISO's traditional role as defender.
Unlike earthquakes and lightning strikes, for which unimpeachable data exists, information security trends suffer from underreporting, environmental factors and subjectivity that call into question any sort of estimate being done