The importance of adopting a security-first mindset and why compliance is a bad substitute for security

Welcome to Venture in Security! Before we begin, do me a favor and make sure you hit the “Subscribe” button. Subscriptions let me know that you care and keep me motivated to write more. Thanks folks! Thanks for supporting Venture in Security! A few weeks ago, I saw a great post on social media, attempting to help companies choose the right infosec framework. The post itself was done quite well but because it was focused on compliance, it got me thinking about how much effort organizations put into security vs compliance, and what that leads to. In this article, I will look into the reasons why compliance efforts often hurt security and how to implement compliance in a way that strengthens it instead, among several other things. The intent of implementing compliance requirements is typically to promote security. Regulators, be it government institutions, trade associations, or Information Sharing and Analysis Centers (ISACs), are hoping that by enforcing standards and establishing infra

Welcome to Venture in Security! Before we begin, do me a favor and make sure you hit the “Subscribe” button. Subscriptions let me know that you care and keep me motivated to write more. Thanks folks! A few weeks ago, I saw a great post on social media, attempting to help companies choose the right infosec framework. The post itself was done quite well but because it was focused on compliance, it got me thinking about how much effort organizations put into security vs compliance, and what that leads to. In this article, I will look into the reasons why compliance efforts often hurt security…

related reading

• A Deep Dive Into The Cloud & Application Security Ecosystemsoftwareanalyst.substack.com
• Managed security service providers: present state, trends, and future outlook of the spaceventureinsecurity.net
• Building practitioner-focused cybersecurity: nine principles for founders and product leadersventureinsecurity.net
• Security is about data: how different approaches are fighting for security data and what the cybersecurity data stack of the future is shaping up to look likeventureinsecurity.net
• Future of cyber defense and move from promise-based to evidence-based securityventureinsecurity.net
• The rise of security engineering and how it is changing the cybersecurity of tomorrowventureinsecurity.net
• Not everything is about technology: 9 of the many sources of cybersecurity innovationventureinsecurity.net
• Software Supply Chain Security (Part 1)softwareanalyst.substack.com
• How security leaders can accelerate innovation in cybersecurityventureinsecurity.net
• Investing in cybersecurity: a deep look at the challenges, opportunities, and tools for cyber-focused VCsventureinsecurity.net
• The dark side of the moon: demystifying cybersecurity business management for CISOs and security practitionersventureinsecurity.net
• Why we need more startups and venture capital in cybersecurity, and what needs to change for the industry to matureventureinsecurity.net