Suggestions
Sherif Koussa
CEO @ Software Secured - Investor
Sherif Koussa is a seasoned professional specializing in assisting small to medium-sized software organizations in designing, developing, and maintaining secure software.
With a focus on application security, Sherif's unique approach aims to provide maximum assurance to both B2C and B2B businesses.
He helps software organizations demonstrate compliance with industry standards such as OWASP Top 10, HIPAA, SANS Top 25, among others.
Sherif Koussa's expertise is valuable for agile teams striving to continuously test their software deliverables to safeguard against data breaches and cyber attacks.
Having studied B.Sc. Computer Science and automatic control dept. at Alexandria University, Sherif Koussa brings a solid educational background to his profession.
Throughout his career, Sherif held key positions including CEO at Software Secured, Founder at Reshift Security and SecurifyLabs, Information Security Engineer at Wells Fargo, and Project Lead at Macadamian Technologies, among others.
He has a rich history of contributions in organizations such as Global Information Assurance Certification, SANS Institute, CounterPath, OWASP Ottawa Chapter, and ITWorx Corporation.
Sherif Koussa's experience spans from leadership roles to software development, project management, and information security consultancy, making him a versatile professional in the software industry.
Highlights
Juggling security priorities isn't as easy as it seems.
I was chatting with a customer recently. They were trying to handle cybersecurity insurance, an incident response retainer, and other security issues all at once.
Does this ring a bell?
Many companies struggle with this. They've got multiple security projects, all needing attention. It can be a lot to handle.
But here's a little tip: It's all about prioritizing.
- Start with the urgent, critical stuff that's due soon.
- Then tackle the rest of your to-do list.
Which ones are critical? the ones that is attached to either: 1- Highest dollar signs (e.g. need pentest report to close x number of deals) 2- The ones with the most impact (e.g. we have to renew our cyber insurance other wise we are in breach of contract)
My customer? They smartly focused on their insurance and retainer before dealing with other security matters.
Good call.
But don't stop there. Keep an eye on what's coming up. During our chat, we noted:
- One project due in August
- Another round of pentesting set for October
Planning ahead helps you use your resources wisely. No more last-minute scrambling.
Keep in mind: Security isn't a one-and-done deal. Take care of immediate needs, but don't forget about your long-term goals.
Regular check-ins and being flexible with your schedule? They're going to be your best allies here.
Balancing multiple security projects is tough. But with good planning and prioritization, you can definitely manage it.
Don't let a bunch of priorities stress you out. Prioritize, plan, and keep at it.
