Julian Cohen – Medium

Julian Cohen

he/him

Enterprise (or Corporate) Security Framework

Enterprise Security (or Corporate Security) is responsible for all the risk in your business assets and enterprise IT, including your…

Jul 29

Enterprise (or Corporate) Security Framework

Jul 29

Breach Readiness Framework

Every organization is going to experience a breach. Be prepared.

Feb 5

Breach Readiness Framework

Feb 5

Data Governance Framework

Data Governance is the security team’s responsibility for understanding, identifying, inventorying, classifying, discovering, and…

Oct 19, 2023

Data Governance Framework

Oct 19, 2023

Security Operations Framework

Security Operations is the technology, controls, and processes that allow a security organization to be able to prevent, detect, and…

Apr 5, 2021

Security Operations Framework

Apr 5, 2021

An Adversary’s Perspective: 2FA

Before you turn on 2FA, think about it from an an adversary’s perspective.

Mar 10, 2021

An Adversary’s Perspective: 2FA

Mar 10, 2021

Seven Deadly Sins of Security Teams

When I talk to organizations and executives, I see the same security mistakes and misconceptions over and over. I see security leaders…

Jan 19, 2021

Seven Deadly Sins of Security Teams

Jan 19, 2021

Mature Controls at Any Size

In this article I will describe a set of basic controls you can implement and scale that any size organization should have.

Jul 7, 2020

Mature Controls at Any Size

Jul 7, 2020

What You Need To Know About Cyber Insurance

Many organizations use cyber insurance to satisfy legal or regulatory requirements, as a financial risk mitigation, or as a last resort…

Jun 29, 2020

What You Need To Know About Cyber Insurance

Jun 29, 2020

Adversary-Based Risk Analysis

Most risk analysis is done by assessing potential impact and ease of an attack. This kind of risk analysis that’s done in the absence of…

Mar 25, 2020

Adversary-Based Risk Analysis

Mar 25, 2020

Adversary-Based Threat Modeling

Most threat models start with attack surface or critical assets. Those threat models are useless and lead to bad decision-making. In this…

Dec 24, 2019

Adversary-Based Threat Modeling

Dec 24, 2019

Julian Cohen

Julian Cohen

he/him

Risk philosopher, CISO, Program builder, Advisor, Investor, Ex-vulnerability researcher, Ex-CTF organizer and competitor.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams