The modern-day infosec warrior faces a multitude of responsibilities and challenges in the business, so it’s important to start off on the right foot. A critical aspect of that is understanding how secure the company is. Knowing that will give you a better sense on what you need to get started on first.
In the companion video below, Ed and Raef walk you through an essential exercise that can help you understand the organization, like detailing the products and services it provides.
“One of the challenges [for security practitioners] is that they try to do too much, too early,” Meeuwisse says.
In this walkthrough, he shares one useful exercise that can aid security practitioners in getting a lay of the land in their organization, serving as the perfect first step in ultimately measuring and reducing information security risks.
To learn more about similar threats and how to address them, be sure to attend the upcoming InfoSec World Conference & Expo in Orlando, Florida.