Anil Markose’s Post

I’m very excited to share that I have joined Oracle’s leadership! Thank you to all my friends that made this possible, and to Allen Marine for a phenomenal recruiting process. We are doing some big things at Oracle…reach out directly if you want to learn more about Oracle SaaS Compliance. #Oracle

Great post by Erez Liebermann on the upcoming DORA requirements. The intent of a lot of these types of disclosure requirements (consider similar expectations in the US from SEC for public companies, or updated CMMC guidance for Defense Sector) is increased transparency as the digital supply chain becomes more complicated with SaaS, PaaS and IaaS variations. I’m not saying this is the best way to force transparency, but these regulatory obligations will require better integration of compliance, engineering, legal and security teams - to enable a more continuous and operational set of monitoring and reporting mechanisms. If you approach this as just a “once a year audit” with random evidence pull, pain level will be very high for all parts involved.

Sorry I will miss so many of my friends at RSA this week, but given all the geo-political tension, I felt the need to be in Tampa this week to support SOF Week. Please DM me if you are in Tampa this week and want to connect. Warrior time!

Thoma Bravo has picked up some world-class cyber brands recently, and there is an opportunity to create an integrated platform play that moves the needle for customers. Time will tell if they realize the potential of this integration of portcos, or if it was a miss.

Good post by Paul O'Rourke. I would also add the use of AI for machine based detection of possible phishing attempts, insider threat scenarios, and social engineering will improve and make the classic “weakest link” (the employee) much less susceptible. We can minimize the human error. The challenge will still be operationalizing new signals, and maintaining hygiene of the attack surface. Time to rethink / evolve a lot of things we have always been doing.

Cyber Royalty Alert!! Had a chance to spend a day with Edward Amoroso (one of the first CISOs ever, and now CEO of TAG Infosphere). Stay tuned for the video we did on a wide set of topics - from what we are doing at Abacode Cybersecurity & Compliance to my opinion on geopolitics (you know I have opinions!). Thanks David Neuman for the connection! #DigitalTrust #FutureofCompliance #Cyber