{"id":234,"date":"2015-01-04T12:56:00","date_gmt":"2015-01-04T12:56:00","guid":{"rendered":"https:\/\/belayclientstaging.zone\/securityeverafter\/2015\/01\/04\/get-wisdom-as-cheaply-as-you-can\/"},"modified":"2015-01-04T12:56:00","modified_gmt":"2015-01-04T12:56:00","slug":"get-wisdom-as-cheaply-as-you-can","status":"publish","type":"post","link":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/","title":{"rendered":"Get Wisdom as Cheaply as You Can"},"content":{"rendered":"

Happy New Year!<\/p>\n

I recently posted the below<\/a> on the SANS Internet Storm Center<\/a> site.<\/p>\n

A long time ago I was given advice from a non-security professional that is among the best and most influential I have received in my security career – “Get wisdom as cheaply as you can\u201d. I was encouraged to learn from the mistakes of others as a means to avoid the full pain of what they were forced to experience.<\/span>
<\/span>
There are so many places where you can get your lessons learned without having to suffer through an outage or a security incident. You can learn from news articles or breach disclosure reports such as the Verizon Data Breach Investigations Report (http:\/\/www.verizonenterprise.com\/DBIR\/<\/u><\/span><\/a>) and Mandiant M-Trends (https:\/\/www.mandiant.com\/resources\/mandiant-reports\/<\/u><\/span><\/a>). Create case studies based on these sources that your incident response team can use to conduct tabletop exercises. This preparation exercise will help you determine if your prevention and detection capabilities would be effective if faced with these scenarios<\/span>
<\/span>
To get you started, here is an example when I failed. I thought it would be a good idea to scan a special internal network segment unannounced with unauthorized equipment. This caused a full and unplanned incident response. I discovered what happened and quickly notified the team of what I did and how sorry I was for causing this incident. Most everyone was gracious and everyone was relieved this was not a real incident. I have not forgotten this lesson and have since put checks in place to make sure it does not happen that way ever again. In addition to learning to only use authorized scanning equipment, I learned the importance of notifying all impacted system and application owners before performing any scans.<\/span>
<\/span>
Learn from the misfortunes of others. By getting wisdom as cheaply as you can, you are given the opportunity to not have to learn the \u201chard way\u201d. What lessons have you learned and how have you applied them? <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Happy New Year! I recently posted the below on the SANS Internet Storm Center site. A long time ago I was given advice from a non-security professional that is among the best and most influential I have received in my security career – “Get wisdom as cheaply as you can\u201d. I was encouraged to learn from the […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[21,18],"tags":[],"jetpack_publicize_connections":[],"yoast_head":"\nGet Wisdom as Cheaply as You Can - Security Ever After - vCISO<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Get Wisdom as Cheaply as You Can - Security Ever After - vCISO\" \/>\n<meta property=\"og:description\" content=\"Happy New Year! I recently posted the below on the SANS Internet Storm Center site. A long time ago I was given advice from a non-security professional that is among the best and most influential I have received in my security career – “Get wisdom as cheaply as you can\u201d. I was encouraged to learn from the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/\" \/>\n<meta property=\"og:site_name\" content=\"Security Ever After - vCISO\" \/>\n<meta property=\"article:published_time\" content=\"2015-01-04T12:56:00+00:00\" \/>\n<meta name=\"author\" content=\"Russell\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@russelleubanks\" \/>\n<meta name=\"twitter:site\" content=\"@russelleubanks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Russell\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/\"},\"author\":{\"name\":\"Russell\",\"@id\":\"https:\/\/securityeverafter.com\/#\/schema\/person\/38dd34bdece8068be18430e4c96ce5f3\"},\"headline\":\"Get Wisdom as Cheaply as You Can\",\"datePublished\":\"2015-01-04T12:56:00+00:00\",\"dateModified\":\"2015-01-04T12:56:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/\"},\"wordCount\":341,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/securityeverafter.com\/#organization\"},\"articleSection\":[\"Operational Security\",\"SANS\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/\",\"url\":\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/\",\"name\":\"Get Wisdom as Cheaply as You Can - Security Ever After - vCISO\",\"isPartOf\":{\"@id\":\"https:\/\/securityeverafter.com\/#website\"},\"datePublished\":\"2015-01-04T12:56:00+00:00\",\"dateModified\":\"2015-01-04T12:56:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/securityeverafter.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Get Wisdom as Cheaply as You Can\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/securityeverafter.com\/#website\",\"url\":\"https:\/\/securityeverafter.com\/\",\"name\":\"Security Ever After - CISO\",\"description\":\"vCISO\",\"publisher\":{\"@id\":\"https:\/\/securityeverafter.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/securityeverafter.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/securityeverafter.com\/#organization\",\"name\":\"Security Ever After\",\"url\":\"https:\/\/securityeverafter.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/securityeverafter.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/securityeverafter.com\/wp-content\/uploads\/2020\/04\/SECURITY-e1589664916497.jpg?fit=1169%2C826&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/securityeverafter.com\/wp-content\/uploads\/2020\/04\/SECURITY-e1589664916497.jpg?fit=1169%2C826&ssl=1\",\"width\":1169,\"height\":826,\"caption\":\"Security Ever After\"},\"image\":{\"@id\":\"https:\/\/securityeverafter.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/russelleubanks\",\"https:\/\/www.linkedin.com\/in\/russelleubanks\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/securityeverafter.com\/#\/schema\/person\/38dd34bdece8068be18430e4c96ce5f3\",\"name\":\"Russell\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/securityeverafter.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8567bffe1f64223494326650c53f921b?s=96&r=pg\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8567bffe1f64223494326650c53f921b?s=96&r=pg\",\"caption\":\"Russell\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Get Wisdom as Cheaply as You Can - Security Ever After - vCISO","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/","og_locale":"en_US","og_type":"article","og_title":"Get Wisdom as Cheaply as You Can - Security Ever After - vCISO","og_description":"Happy New Year! I recently posted the below on the SANS Internet Storm Center site. A long time ago I was given advice from a non-security professional that is among the best and most influential I have received in my security career – “Get wisdom as cheaply as you can\u201d. I was encouraged to learn from the […]","og_url":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/","og_site_name":"Security Ever After - vCISO","article_published_time":"2015-01-04T12:56:00+00:00","author":"Russell","twitter_card":"summary_large_image","twitter_creator":"@russelleubanks","twitter_site":"@russelleubanks","twitter_misc":{"Written by":"Russell","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#article","isPartOf":{"@id":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/"},"author":{"name":"Russell","@id":"https:\/\/securityeverafter.com\/#\/schema\/person\/38dd34bdece8068be18430e4c96ce5f3"},"headline":"Get Wisdom as Cheaply as You Can","datePublished":"2015-01-04T12:56:00+00:00","dateModified":"2015-01-04T12:56:00+00:00","mainEntityOfPage":{"@id":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/"},"wordCount":341,"commentCount":1,"publisher":{"@id":"https:\/\/securityeverafter.com\/#organization"},"articleSection":["Operational Security","SANS"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/","url":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/","name":"Get Wisdom as Cheaply as You Can - Security Ever After - vCISO","isPartOf":{"@id":"https:\/\/securityeverafter.com\/#website"},"datePublished":"2015-01-04T12:56:00+00:00","dateModified":"2015-01-04T12:56:00+00:00","breadcrumb":{"@id":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/securityeverafter.com\/get-wisdom-as-cheaply-as-you-can\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/securityeverafter.com\/"},{"@type":"ListItem","position":2,"name":"Get Wisdom as Cheaply as You Can"}]},{"@type":"WebSite","@id":"https:\/\/securityeverafter.com\/#website","url":"https:\/\/securityeverafter.com\/","name":"Security Ever After - CISO","description":"vCISO","publisher":{"@id":"https:\/\/securityeverafter.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/securityeverafter.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/securityeverafter.com\/#organization","name":"Security Ever After","url":"https:\/\/securityeverafter.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/securityeverafter.com\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/securityeverafter.com\/wp-content\/uploads\/2020\/04\/SECURITY-e1589664916497.jpg?fit=1169%2C826&ssl=1","contentUrl":"https:\/\/i0.wp.com\/securityeverafter.com\/wp-content\/uploads\/2020\/04\/SECURITY-e1589664916497.jpg?fit=1169%2C826&ssl=1","width":1169,"height":826,"caption":"Security Ever After"},"image":{"@id":"https:\/\/securityeverafter.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/russelleubanks","https:\/\/www.linkedin.com\/in\/russelleubanks\/"]},{"@type":"Person","@id":"https:\/\/securityeverafter.com\/#\/schema\/person\/38dd34bdece8068be18430e4c96ce5f3","name":"Russell","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/securityeverafter.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8567bffe1f64223494326650c53f921b?s=96&r=pg","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8567bffe1f64223494326650c53f921b?s=96&r=pg","caption":"Russell"}}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/posts\/234"}],"collection":[{"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/comments?post=234"}],"version-history":[{"count":0,"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/posts\/234\/revisions"}],"wp:attachment":[{"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/media?parent=234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/categories?post=234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securityeverafter.com\/wp-json\/wp\/v2\/tags?post=234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}