Suggestions
Shay Colson, CISSP
Cybersecurity for Growth-Stage Companies and Investors
Shay Colson, CISSP, is a client-focused and highly motivated cybersecurity leader dedicated to enhancing security practices through collaboration and transparency. With a keen eye for detail and a strategic mindset, Shay excels in communication and innovation, constantly seeking to tackle complex challenges.
Shay's background includes diverse experiences in cybersecurity, from serving as the Chief Information Security Officer at MIN-NS to holding roles at organizations like Kroll, Cloud Security Alliance, and the US Federal Government. Shay's educational journey comprises a Bachelor of Arts in Comparative History of Ideas from the University of Washington and a Master of Science in Information Management from Syracuse University.
Throughout Shay's career, they have demonstrated a passion for self-propelled adventures and a commitment to continuous learning, as evidenced by their involvement in various cybersecurity roles and educational pursuits. Additionally, Shay has a history of engagement in outreach activities and academia, showcasing a well-rounded professional profile.
As an organizational navigator and an advocate for progress, Shay excels in driving cybersecurity initiatives and fostering a culture of improvement. With a track record of leadership and expertise in application security, product management, and cyber risk due diligence, Shay brings a wealth of knowledge and experience to the cybersecurity domain.
In addition to their professional accomplishments, Shay's enthusiasm for challenges, innovation, and personal growth sets them apart as a dynamic and forward-thinking cybersecurity professional. Shay's commitment to the 'infinite game' reflects their enduring dedication to long-term success and positive impact in the cybersecurity field.
Highlights
Sounds like a lot of bot traffic - and it is - but you've got to figure this number is only going to skyrocket in the age of AI, no? I mean, soon, most of the internet will just be bot-on-bot, if it isn't already.
I remain puzzled by the #cyberinsurance market. Fresh data from the folks at Corvus Insurance show that "the average ransomware demand reached $1,571,667. That represents a quarterly increase of 102% and the highest figure Corvus has reported since the second quarter of 2022. The average ransom payment also reached a new high of $626,415."
Meanwhile, cyber insurance premiums are dropping (even though claim volume and amounts are rising): https://lnkd.in/gCWtaHHz
Study authors at Howden assert that the drop is driven by "robust risk controls" - but if we're seeing record successful attacks, how robust can those controls really be?
Love the skeptical quote included at the bottom of the Tanium piece and tend to agree: "“When prices fall on simple commodities, like a can of Coke or a GM car, that’s generally a good thing for consumers,” Kolochenko says. “But for complex products like cyber insurance, when prices go down, it likely means something changed. If something improved, it’s more likely it improved for the insurer rather than the insured."
