cissp
Відкрити в Telegram
@cissp International channel 4 Transmission Knowledge In the Field of Cyber Security with a Focus on the Content of the CISSP-ISC2 Course - - - - - - - - - - +also group: https://t.me/cisspgroup ————————— @alirezaghahrood
Показати більше📈 Аналітичний огляд Telegram-каналу cissp
Канал cissp (@cissp) у мовному сегменті Англійська є активним учасником. На даний момент спільнота об'єднує 16 091 підписників, посідаючи 7 978 місце в категорії Технології та додатки та 2 308 місце у регіоні США.
📊 Показники аудиторії та динаміка
З моменту свого створення невідомо, проект продемонстрував стрімке зростання, зібравши аудиторію у 16 091 підписників.
За останніми даними від 23 жовтня, 2026, канал демонструє стабільну активність. Хоча за останні 30 днів спостерігається зміна кількості учасників на -27, а за останні 24 години на -2, загальне охоплення залишається високим.
- Статус верифікації: Не верифікований
- Рівень залученості (ER): Середній показник залученості аудиторії становить 5.00%. Протягом перших 24 годин після публікації контент зазвичай збирає 1.75% реакцій від загальної кількості підписників.
- Охоплення публікацій: В середньому кожен допис отримує 805 переглядів. Протягом першої доби публікація в середньому набирає 282 переглядів.
- Реакції та взаємодія: Аудиторія активно підтримує контент: середня кількість реакцій на один пост – 0.
- Тематичні інтереси: Контент зосереджений навколо ключових тем, таких як ciso, cyber, cybersecurity, defense, threat.
📝 Опис та контентна політика
Автор описує ресурс як майданчик для висловлення суб'єктивної думки:
“@cissp
International channel 4 Transmission Knowledge In the Field of Cyber Security with a Focus on the Content of the CISSP-ISC2 Course
- - - - - - - - - -
+also group: https://t.me/cisspgroup
—————————
@alirezaghahrood”
Завдяки високій частоті оновлень (останні дані отримано 24 жовтня, 2026), канал підтримує актуальність та високий рівень охоплення публікацій. Аналітика показує, що аудиторія активно взаємодіє з контентом, що робить його важливою точкою впливу в категорії Технології та додатки.
16 091
Підписники
-224 години
-137 днів
-2730 днів
Завантажуємо дані
Схожі канали
Хмара тегів
Вхідні та вихідні згадування
---
---
---
---
---
---
Залучення підписників
жовтень '26жовт '26
жовтень '26
+51
в 0 каналах
вересень '26
+69
в 2 каналах
Get PRO
серпень '26
+71
в 1 каналах
Get PRO
липень '26
+90
в 0 каналах
Get PRO
червень '26
+61
в 0 каналах
Get PRO
травень '26
+62
в 0 каналах
Get PRO
квітень '26
+92
в 0 каналах
Get PRO
березень '26
+48
в 1 каналах
Get PRO
лютий '26
+73
в 0 каналах
Get PRO
січень '26
+82
в 0 каналах
Get PRO
грудень '25
+47
в 0 каналах
Get PRO
листопад '25
+64
в 0 каналах
Get PRO
жовтень '25
+74
в 0 каналах
Get PRO
вересень '25
+55
в 0 каналах
Get PRO
серпень '25
+65
в 0 каналах
Get PRO
липень '25
+78
в 0 каналах
Get PRO
червень '25
+63
в 0 каналах
Get PRO
травень '25
+101
в 1 каналах
Get PRO
квітень '25
+90
в 0 каналах
Get PRO
березень '25
+87
в 0 каналах
Get PRO
лютий '25
+107
в 0 каналах
Get PRO
січень '25
+136
в 1 каналах
Get PRO
грудень '24
+118
в 1 каналах
Get PRO
листопад '24
+128
в 0 каналах
Get PRO
жовтень '24
+162
в 0 каналах
Get PRO
вересень '24
+274
в 1 каналах
Get PRO
серпень '24
+324
в 1 каналах
Get PRO
липень '24
+292
в 0 каналах
Get PRO
червень '24
+368
в 0 каналах
Get PRO
травень '24
+398
в 0 каналах
Get PRO
квітень '24
+413
в 0 каналах
Get PRO
березень '24
+430
в 0 каналах
Get PRO
лютий '24
+369
в 0 каналах
Get PRO
січень '24
+430
в 1 каналах
Get PRO
грудень '23
+279
в 0 каналах
Get PRO
листопад '23
+173
в 0 каналах
Get PRO
жовтень '23
+220
в 0 каналах
Get PRO
вересень '23
+208
в 0 каналах
Get PRO
серпень '23
+206
в 0 каналах
Get PRO
липень '23
+233
в 0 каналах
Get PRO
червень '23
+227
в 0 каналах
Get PRO
травень '23
+248
в 0 каналах
Get PRO
квітень '23
+178
в 0 каналах
Get PRO
березень '23
+218
в 0 каналах
Get PRO
лютий '23
+232
в 0 каналах
Get PRO
січень '23
+299
в 0 каналах
Get PRO
грудень '22
+223
в 0 каналах
Get PRO
листопад '22
+199
в 0 каналах
Get PRO
жовтень '22
+273
в 0 каналах
Get PRO
вересень '22
+267
в 0 каналах
Get PRO
серпень '22
+253
в 0 каналах
Get PRO
липень '22
+229
в 0 каналах
Get PRO
червень '22
+230
в 0 каналах
Get PRO
травень '22
+209
в 0 каналах
Get PRO
квітень '22
+244
в 0 каналах
Get PRO
березень '22
+307
в 0 каналах
Get PRO
лютий '22
+219
в 0 каналах
Get PRO
січень '22
+311
в 0 каналах
Get PRO
грудень '21
+223
в 0 каналах
Get PRO
листопад '21
+217
в 0 каналах
Get PRO
жовтень '21
+567
в 0 каналах
Get PRO
вересень '21
+295
в 0 каналах
Get PRO
серпень '21
+319
в 0 каналах
Get PRO
липень '21
+343
в 0 каналах
Get PRO
червень '21
+329
в 0 каналах
Get PRO
травень '21
+330
в 0 каналах
Get PRO
квітень '21
+357
в 0 каналах
Get PRO
березень '21
+374
в 0 каналах
Get PRO
лютий '21
+310
в 0 каналах
Get PRO
січень '21
+445
в 0 каналах
Get PRO
грудень '20
+6 560
в 0 каналах
| Дата | Залучення підписників | Згадування | Канали | |
| 24 жовтня | 0 | |||
| 23 жовтня | 0 | |||
| 22 жовтня | +3 | |||
| 21 жовтня | 0 | |||
| 20 жовтня | +2 | |||
| 19 жовтня | +4 | |||
| 18 жовтня | +4 | |||
| 17 жовтня | +2 | |||
| 16 жовтня | +4 | |||
| 15 жовтня | 0 | |||
| 14 жовтня | 0 | |||
| 13 жовтня | 0 | |||
| 12 жовтня | +1 | |||
| 11 жовтня | +2 | |||
| 10 жовтня | +2 | |||
| 09 жовтня | +3 | |||
| 08 жовтня | 0 | |||
| 07 жовтня | +2 | |||
| 06 жовтня | +1 | |||
| 05 жовтня | 0 | |||
| 04 жовтня | +5 | |||
| 03 жовтня | +5 | |||
| 02 жовтня | +7 | |||
| 01 жовтня | +4 |
Дописи каналу
Repost from CISO as a Service
امنیت سایبری در سال ۲۰۲۶
از استقرار ابزارهای امنیتی تا اثبات اثربخشی دفاع
گزارش پژوهشی ۲۰۲۶ مؤسسه SANS نکته مهمی را یادآوری میکند که داشتن ابزارهای امنیتی متعدد لزوما به معنای برخورداری از توان دفاعی مؤثر نیست.
چند موضوع در این مجموعه پژوهشی قابلتوجه است:
▪️ امنیت هوش مصنوعی: بررسی آسیبپذیری کدهای تولیدشده توسط هوش مصنوعی، حملات تزریق دستور و اثربخشی کنترلهای امنیتی موجود.
▪️ مهندسی تشخیص: اهمیت دادههای ترافیک شبکه و تحلیل رفتار برای شناسایی حرکت جانبی مهاجمان حتی زمانی که از ابزارهای مجاز سازمان استفاده میکنند.
▪️ امنیت ابر و هویت: کاهش سطح حمله از طریق مدیریت دسترسیهای ممتاز، دسترسی موقت و تحلیل مسیرهای نفوذ.
▪️ عملیات مرکز امنیت: شناسایی روشهای ماندگاری مهاجم، بهبود قواعد تشخیص و همبستگی رویدادهای امنیتی.
اما از نگاه مدیریتی مسئله اصلی چیز دیگری است😊
آیا سازمان واقعا میداند کنترلهای امنیتی مستقرش تا چه اندازه در برابر سناریوهای حمله مؤثر هستند؟ تفاوت مهمی میان داشتن کنترل امنیتی و اطمینان از اثربخشی آن وجود دارد.
به اعتقاد من بلوغ امنیت سایبری را نباید صرفا با تعداد محصولات، ابزارها و فناوریهای مستقرشده سنجید بلکه باید توان واقعی سازمان در پیشگیری، شناسایی، مهار و بازیابی در برابر حملات را ارزیابی کرد. امنیت سایبری زمانی ارزش واقعی ایجاد میکند که اثربخشی آن قابل سنجش و اثبات باشد.
#Cybersecurity #CISO #SecurityGovernance #DetectionEngineering #CyberResilience
ُ 💕👍Special Thanks to
SANS Institute
SANS Technology Institute
SANS EMEA
— CISO as a Service —
Strategic Cyber Defense & GRC
Resilient Through Knowledge
2026.10.21
https://lnkd.in/p/ds5Bingm
| 2 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
Cybersecurity Research 2026:
From Security Tools to Measurable Defense Effectiveness
The SANS Technology Institute Research Review Journal 2026 highlights an important shift in cybersecurit 👍 moving beyond deploying security controls toward validating their effectiveness against realworld threats.
Several research areas stand out:
_AI Security: Testing AI-generated code, prompt injection defenses, and LLM-assisted threat modeling.
_Detection Engineering: Improving lateral movement detection through network telemetry and behavioral analysis.
_Cloud & Identity Security: Reducing attack exposure through Just-in-Time privileged access and attack path analysis.
_SOC Operations: Strengthening detection logic, telemetry correlation, and adversary persistence detection.
Security maturity should not be measured by the number of deployed technologies, but by how effectively organizations can prevent, detect, contain, and recover from adversarial activity.
For CISOs and security leaders, continuous control validation and evidence based security investment should become strategic priorities.
Special Thanks to 👌💕
SANS Institute
SANS Technology Institute
SANS EMEA
–Security you can rely on–
2026.10.21
————————————
#Cybersecurity #CISO #SecurityArchitecture #DetectionEngineering #CyberResilience #AIsecurity
https://www.linkedin.com/feed/update/urn:li:activity:7518581427576135680 | 435 |
| 3 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
Cybersecurity Update | Atlassian, Google Chrome & AI-Driven Vulnerability Discovery
Recent security developments involving Atlassian Data Center products and Google Chrome 155 highlight growing challenges in enterprise vulnerability management.
🔹 Atlassian (CVE-2026-21589): A critical vulnerability potentially exposing sensitive files across enterprise platforms, including Jira, Confluence, and Bitbucket.
🔹 Google Chrome 155: A major security update addressing 247 vulnerabilities, including critical use-after-free flaws. Notably, AI-assisted research contributed to identifying two critical vulnerabilities.
These developments reinforce three priorities for CISOs:
1. Risk-Based Prioritization: Evaluate vulnerabilities based on business impact, asset criticality, and data sensitivity not CVSS scores alone.
2. Enterprise Patch Governance: Ensure timely remediation across browsers, collaboration platforms, and development environments.
3. AI-Driven Security Readiness: Prepare security teams for faster vulnerability discovery through AI-assisted research, while maintaining rigorous validation and remediation processes.
The CISO challenge is no longer just identifying vulnerabilities. It is building the organizational capability to respond faster than the risk evolves.
Special Thanks🙏🤙🏾😁
https://lnkd.in/dSbMVhx9
https://lnkd.in/fYHu3GY
https://lnkd.in/g3n_z6GT
–Security you can rely on–
2026.10.15
————————————
#CyberSecurity #CISO #vCISO #GoogleChrome #Atlassian #VulnerabilityManagement #AISecurity #GR
https://www.linkedin.com/posts/diyako-secure-bow_diyakosecurebow-cybersecurity-ciso-activity-7516393714831745024-YdXt | 727 |
| 4 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
What remains protected when the Windows kernel is compromised? This is a question CISOs should bring into endpoint security architecture reviews.
Connor McGarr’s SANS HackFest Hollywood 2024 presentation, “Redefining Security Boundaries,” explores how hypervisor-backed Windows security introduces additional boundaries of trust.
Virtualization-based Security (VBS) uses the Windows hypervisor to create an isolated security environment. Credential Guard uses this isolation to protect selected authentication secrets, while Hypervisor-Protected Code Integrity (HVCI) protects kernel code-integrity enforcement.
For security leaders, the practical challenge is turning these capabilities into verified protection:
• Confirm that controls are running across the intended assets.
• Test driver compatibility and application performance before broad deployment.
• Govern exceptions with clear ownership, compensating controls, and review dates.
• Maintain patching, privileged-access controls, and endpoint detection alongside these protections.
At Diyako Secure Bow, we believe hardening should be assessed through the attack paths it constrains and the evidence that it works. A configuration policy shows intent. Verified enforcement demonstrates protection.
–Security you can rely on–
2026.10.11
————————————
#CISO #SecurityArchitecture #WindowsSecurity #CyberResilience #DiyakoSecureBow
https://lnkd.in/p/drjfYmcc | 1 001 |
| 5 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
As AI moves into business operations, organizations need to govern more than the models they deploy. They need to govern the access, data, and decisions those models can influence.
The Cloud Security Alliance’s AI security roundup raises a practical question: Is security keeping pace with adoption?
For security leaders, that means answering five questions:
• Where is AI operating, including tools adopted outside formal approval?
• What data can it access, and under whose authority?
• What permissions do AI agents hold, and who owns their actions?
• Which decisions require human approval?
• Can the organization detect unexpected behavior, revoke access, and recover?
At Diyako Secure Bow, we view secure AI adoption as a governance and architecture responsibility. AI inventories, accountable owners, least-privilege access, data protection, and tested response procedures should be part of deployment from the outset.
For agents that can execute actions, permissions and approval boundaries deserve the same scrutiny as any other privileged identity.
The measure of success is whether the organization can use AI while maintaining control, accountability, and business continuity.
Explore the CSA articles:
• Enterprise AI security: adoption and trust
• AI in production: security readiness
• AI agents: identity and permission risks
–Security you can rely on–
2026.10.13
————————————
#AISecurity #AIGovernance #Cybersecurity #AgenticAI #DiyakoSecureBow
https://www.linkedin.com/feed/update/urn:li:activity:7515686708101963776 | 610 |
| 6 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
What remains protected when the Windows kernel is compromised? This is a question CISOs should bring into endpoint security architecture reviews.
Connor McGarr’s SANS HackFest Hollywood 2024 presentation, “Redefining Security Boundaries,” explores how hypervisor-backed Windows security introduces additional boundaries of trust.
Virtualization-based Security (VBS) uses the Windows hypervisor to create an isolated security environment. Credential Guard uses this isolation to protect selected authentication secrets, while Hypervisor-Protected Code Integrity (HVCI) protects kernel code-integrity enforcement.
For security leaders, the practical challenge is turning these capabilities into verified protection:
• Confirm that controls are running across the intended assets.
• Test driver compatibility and application performance before broad deployment.
• Govern exceptions with clear ownership, compensating controls, and review dates.
• Maintain patching, privileged-access controls, and endpoint detection alongside these protections.
At Diyako Secure Bow, we believe hardening should be assessed through the attack paths it constrains and the evidence that it works. A configuration policy shows intent. Verified enforcement demonstrates protection.
–Security you can rely on–
2026.10.11
————————————
#CISO #SecurityArchitecture #WindowsSecurity #CyberResilience #DiyakoSecureBow
https://lnkd.in/p/drjfYmcc | 821 |
| 7 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
Legacy technology is not just technical debt it can become security debt. NTLM is a good example.
Despite decades of security evolution, it remains embedded in many Windows environments, creating exposure that cannot be addressed by patching alone.
The real challenge is visibility, dependency, and controlled migration. For security leaders, the question should not only be “Is NTLM enabled?” but “Do we know where we still depend on it, why, and what our plan is to eliminate that dependency?”
Security modernization starts with understanding what the business still depends on especially the legacy components nobody wants to touch.
Special Thanks to🤙🏾♥️🙏😊
to Elad Shamir + SpecterOps 4 the insightful presentation, and to Mustafa Tayefi for raising an important discussion around a legacy risk that still deserves serious attention.
–Security you can rely on–
2026.09.27
————————————
#Cybersecurity #CISO #ActiveDirectory #NTLM #IdentitySecurity #SecurityArchitecture
https://lnkd.in/p/eKcfWcCW | 1 457 |
| 8 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
A cybersecurity professional doesn’t need to be an expert in every domain. However, they should have a solid understanding of the different areas of cybersecurity, understand how they interact, and be able to see the bigger picture.
Everyone may develop deep expertise in one or more specific domains, but having a working knowledge of security architecture, risk management, governance and compliance, SOC operations, penetration testing, vulnerability management, cloud security, identity and access management, and incident response is essential.
To me, the right professional path in cybersecurity is:
Deep expertise in one domain, broad knowledge across others, and the ability to connect the dots.
Cybersecurity is not a collection of isolated specialties
it is an interconnected discipline.
–Security you can rely on–
2026.09.25
————————————
#CyberSecurity #OTSecurity #ICSsecurity #CISO #IndustrialCybersecurity #CriticalInfrastructure
https://www.linkedin.com/posts/diyako-secure-bow_diyakosecurebow-cybersecurity-otsecurity-activity-7509323404383010816-ZJaX | 1 879 |
| 9 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
AI Is Changing the OT Threat Model Faster Than Many Organizations Are Adapting.
The recent warning regarding AI-assisted exploitation of Siemens S7 PLCs should not be viewed as just another vulnerability alert. It signals a more fundamental shift in industrial cybersecurity. Threat actors are increasingly using AI to accelerate reconnaissance, generate and adapt exploitation scripts, and reduce the technical expertise required to target industrial environments.
For CISOs and OT security leaders, the key issue is not simply that AI makes attackers “smarter.”
AI makes offensive capability cheaper, faster, and more scalable.
And that matters significantly in OT environments, where legacy systems, long technology lifecycles, limited patching windows, weak segmentation, remote engineering access, and exposed industrial protocols may already create substantial attack surface.
From a CISO perspective, organizations operating ICS/OT environments should reassess several assumptions:
• Are any PLCs, engineering workstations, HMIs, or OT management interfaces directly or indirectly exposed to the Internet?
• Is IT/OT segmentation actually enforced, or does it exist primarily in architecture diagrams?
• Are engineering and vendor remote access paths tightly controlled, monitored, and periodically reviewed?
• Do we maintain an accurate inventory of PLCs, firmware versions, industrial protocols, communication paths, and trust relationships?
• Can we detect abnormal programming, configuration changes, unauthorized read/write operations, or unusual PLC communications?
• Have incident response scenarios been tested for cyber physical consequences, not only traditional IT compromise?
The strategic lesson is broader than Siemens S7.
When AI lowers the barrier to offensive capability, insecure by design and poorly protected industrial systems become increasingly attractive targets.
OT cybersecurity can therefore no longer be treated primarily as a firewall, patching, or compliance problem.
It must be approached as a cyber physical risk and resilience problem integrating asset visibility, secure architecture, segmentation, access governance, continuous monitoring, incident response, process safety, and business continuity.
For CISOs, the question is no longer
“Can sophisticated attackers target our industrial systems?”
The more relevant question is
“What happens when sophisticated attack capabilities become accessible to far less sophisticated attackers? That is the threat model shift organizations should be preparing for now.
What defenders should check
https://thehackernews.com/2026/08/ai-generated-exploit-scripts-target.html
–Security you can rely on–
2026.09.11
————————————
#CyberSecurity #OTSecurity #ICSsecurity #CISO #IndustrialCybersecurity #CriticalInfrastructure #ArtificialIntelligence #CyberResilience #PLCSecurity #SecureByDesign
https://lnkd.in/p/d35CRFHR | 1 414 |
| 10 | The CISO Role Is No Longer Just About Security
The CISO mandate is expanding rapidly from protecting systems to shaping business resilience, AI governance, regulatory compliance, and enterprise risk.
Splunk’s latest CISO Report highlights several important shifts:
• 79% of CISOs say their role has become significantly more complex.
• 96% are now responsible for AI governance and risk management.
• 95% see increasingly sophisticated threat actors as a major challenge.
• Yet technology alone is not the answer.
CISOs continue to prioritize human expertise, upskilling, and specialized talent.
The message is clear:
The modern CISO is becoming an architect of trust, resilience, and business continuity not simply the person responsible for cybersecurity.
And in the AI era, success will depend on balancing innovation with governance, technology with human judgment, and security metrics with measurable business outcomes.
Special Thanks To
Splunk Splunk Hüb Splunk Training and Certification
👍❤️😊
— CISO as a Service —
Strategic Cyber Defense & GRC
Resilient Through Knowledge
2026.09.06
#CISO #Cybersecurity #AI #CyberRisk #DigitalResilience #SecurityLeadership #GRC #AIGovernance
https://www.linkedin.com/posts/alirezaghahrood_ciso-splunk-2026-report-activity-7502246217452679168-p0Eq | 1 339 |
| 11 | I’m excited to attend GISEC GLOBAL! Join me at the region’s largest cybersecurity event, where industry leaders, innovators and cyber experts come together to connect, exchange insights and shape the future of cybersecurity.
🎟️ Get your free visitor pass here 👉 https://lnkd.in/dQkmaR9m
📅 16 - 18 September 2026
📍 Dubai Exhibition Center (DEC), Expo City, Dubai
Let’s connect at #GISECGLOBAL!
https://lnkd.in/p/d9_WfccT | 1 093 |
| 12 | Cyber Recovery is no longer just a backup problem.
It is a business resilience problem.
The IDC MarketScape: Worldwide Cyber-Recovery 2025 Vendor Assessment is another indication of how significantly the recovery landscape has evolved. For years, many organizations approached backup and disaster recovery primarily as an IT availability function
protect the data, maintain copies, and restore when necessary.
Ransomware has fundamentally changed that equation.
Today the critical question is not simply
Do we have a backup?”
It is: Can we recover trusted data and critical services after a cyberattack within an acceptable timeframe and without reintroducing the compromise?
That distinction matters.
A mature cyber recovery capability requires more than backup technology. It requires a coordinated architecture covering:
• Immutable and isolated recovery copies
• Clean and trusted recovery environments
• Identity and privileged-access protection
• Recovery testing and validation
• Defined RTO/RPO aligned with business impact
• Incident Response and Disaster Recovery integration
• Clear recovery prioritization for critical business services
The recognition of Commvault as a Leader in this IDC MarketScape is noteworthy, but the broader message for CISOs, CIOs, and technology leaders is more important
Cyber resilience should be designed around the assumption that prevention may eventually fail.
Organizations that cannot demonstrate how they will restore trusted operations after a destructive cyber incident do not yet have a complete resilience strategy. Backup protects data. Disaster Recovery restores technology. Cyber Recovery must restore trust in the environment.
— CISO as a Service —
Strategic Cyber Defense & GRC
Resilient Through Knowledge
2026.09.05
#CyberRecovery #CyberResilience #Ransomware #BusinessContinuity #DisasterRecovery #CISO #CyberSecurity #DataProtection #Commvault #IDC
https://www.linkedin.com/posts/alirezaghahrood_cyber-recovery-activity-7501878648845692930-9ri0 | 1 133 |
| 13 | I look forward to attending #ADIPEC2026 in Abu Dhabi from 2-5 November 2026.
Secure your visitor pass: https://lnkd.in/dJhSGNP6
Join me and more than 239,000 energy professionals, including industry leaders, innovators and business decision-makers, at the world’s largest event for energy collaboration and innovation.
#ADIPEC #ADNOC #energy #futureofenergy
https://www.linkedin.com/posts/alirezaghahrood_adipec2026-adipec-adnoc-activity-7500914619985833985-F7D6 | 1 163 |
| 14 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
I will be joining a distinguished Gp of professionals and executives in the panel “Emerging Technologies, CyberSec in the Capital Market” to discuss an issue that, in my view, deserves significantly greater attention.
The future of cybersecurity is not defined solely by new technologies and security tools. A substantial part of it depends on the quality of GRC, management structures, and human capital.
In recent years, many organizations have placed significant emphasis on acquiring and deploying security products, implementing controls and standards, establishing monitoring and threat response capabilities.
These measures are essential. But organizational security cannot be engineered through tools alone.
There are more fundamental questions that need to be addressed:
— Has cybersecurity truly earned its place as a strategic and executive-level priority within organizations?
— Does the CISO have the authority, independence, accountability, and access required to fulfill the mandate?
— Is the security reporting structure and GRC model properly aligned with the organization’s business risks?
— And, perhaps most importantly, have we established the competency models, professional career paths, and human capital structures appropriate to the level of responsibility these positions carry?
These questions are not limited to a single industry.
From government and critical infrastructure to banking, insurance, capital markets, and other critical sectors, the quality of cybersecurity governance can have a direct impact on organizational resilience and business continuity.
The same applies to professional cybersecurity education.
The gap between theoretical education, professional certifications, hands-on experience, and the ability to make sound decisions under real-world conditions remains one of the critical challenges in developing cybersecurity talent.
In my view, if we genuinely want to discuss the future of cybersecurity, we need to move the conversation beyond products, tools, and trends and address the issues that ultimately determine whether security becomes an organizational capability:
Governance.
Executive accountability.
Professional competency.
Human capital.
Organizational resilience.
And perhaps it is also time to move beyond title-driven panels, symbolic positions, and relationship based platforms, and create more space for people who have actually built, operated, governed, and been accountable for cybersecurity in real organizations.
But enough of that.
Today at 12:30 PM, at ELECOMP Talks, we look forward to a substantive discussion. I hope this session becomes an opportunity for genuine, professional, experience-driven exchangenot simply another repetition of what we already know.
Alireza Ghahrood
Ravro | Bug Bounty Platform
Mohammad Amin Kariman
–Security you can rely on–
2026.08.31
————————————
#CISO #CyberSecurity #CyberResilience #OperationalResilience
https://www.linkedin.com/posts/diyako-secure-bow_diyakosecurebow-ciso-cybersecurity-activity-7499948560780718080-OnTb | 1 298 |
| 15 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
1. Scope & Applicability
Which regulated entities are covered by the framework.
2. New Definitions
Introduction and clarification of cybersecurity terminology.
3. Inventory Management
Stronger requirements for identifying and managing technology assets.
4. Designated Officers
Enhanced cybersecurity roles, responsibilities, and accountability.
5. Operational Resilience
A shift from concentration-risk thinking toward broader operational resilience.
6. Log Management
Requirements for collecting, managing, retaining, and protecting logs.
7. Data Localization & Retention
Rules governing where data is stored and how long it must be retained.
8. Self-Certification
Certification requirements relating to internally developed software products.
9. Security Audits
Requirements for cybersecurity audits and auditing organizations.
10. Incident Response
Cyber incident reporting, response, escalation, and communication.
11. Data & Device Security
Security controls for organizational data and devices.
12. Third-Party Responsibility
Greater accountability for cybersecurity risks arising from vendors and service providers.
From a CISO perspective
The important point is that this framework is not simply about implementing more security controls. Its direction is closer to:
Cybersecurity Governance
Risk Management
Operational Resilience
Executive Accountability
A mature CISO function therefore needs to demonstrate:
What assets do we have?
What risks affect them?
What controls mitigate those risks?
Are those controls actually effective?
How do we respond and recover from incidents?
How are third-party risks governed?
Can critical business services continue during a cyber disruption?
Cybersecurity is no longer only about preventing incidents. It is about ensuring that the organization can withstand, respond to, recover from, and continue operating through cyber disruption.
–Security you can rely on–
2026.08.21
————————————————
#CISO #CyberSecurity #CyberResilience #OperationalResilience #CyberRisk #SecurityGovernance #RiskManagement #GRC #InformationSecurity #ThirdPartyRisk #IncidentResponse #SEBI #CSCRF #BusinessContinuity #CyberSecurityGovernance
https://www.linkedin.com/posts/diyako-secure-bow_sebi-cyber-security-cyber-resiliency-framework-activity-7496453850745417728-gn0k | 1 385 |
| 16 | Attackers are already probing an unpatched GeoServer zero-day. The SQL injection flaw drew hundreds of attempts within hours of disclosure and, under certain configurations, can lead to remote code execution.
No patch is available yet.
Read the details:
https://thehackernews.com/2026/08/unpatched-geoserver-zero-day-targeted.html
— CISO as a Service —
Strategic Cyber Defense & GRC
Resilient Through Knowledge
2026.08.15
https://www.linkedin.com/posts/alirezaghahrood_attackers-are-already-probing-an-unpatched-share-7494154096929677313-hXKY | 1 545 |
| 17 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
Executive Insights from the CyberEdge Cyberthreat Defense Report 2026
based on insights from more than 1,200 IT security decision-makers and practitioners across 17 countries and 19 industries, provides one of the most comprehensive views of today's cybersecurity landscape. After reviewing this year's report, one message stands out:
Organizations are more confident in their security capabilities than ever before yet they are simultaneously more concerned about the future than at any point in recent years.
This is not a contradiction. It reflects the reality of today's cyber battlefield.
Over the past few years, organizations have significantly invested in technologies such as Zero Trust, XDR, SIEM, SOAR, and AI-driven security operations. These investments have improved overall security maturity and strengthened defensive capabilities.
However, threat actors have evolved just as rapidly.
Artificial Intelligence is reshaping offensive cyber operations by enabling highly personalized phishing campaigns, faster vulnerability discovery, more convincing social engineering, automated reconnaissance, and increasingly sophisticated attack techniques.
One of the report's most significant findings is that phishing and spear phishing have overtaken malware as the cybersecurity threat of greatest concern among security professionals. This marks a fundamental shift in the threat landscape. Cyberattacks are no longer focused solely on exploiting technical vulnerabilities they increasingly target human behavior, digital identities, and trust relationships.
Identity is no longer just an IT function it has become the foundation of modern cybersecurity. As organizations continue expanding across cloud environments,, APIs, and AI-powered services, identity has become the new security perimeter. At the same time, while organizations report stronger security postures in cloud infrastructure and core IT systems, they continue to struggle with areas such as security awareness, third-party risk management, and securing AI-powered applications. These remain among the weakest links in enterprise cybersecurity and the very areas where attackers are increasingly concentrating their efforts.
Another encouraging finding is the continued increase in cybersecurity investment. Nearly nine out of ten organizations expect their cybersecurity budgets to grow, demonstrating that cybersecurity is increasingly viewed as a strategic business investment rather than an operational expense.
The future of cybersecurity will not be determined by who owns the most technology but by who can integrate technology, people, governance, and Artificial Intelligence into a unified cyber defense strategy.
Cybersecurity is no longer a technology challenge. It is a business resilience strategy.
Special Thanks to
Google Cloud Security ISC2 Rubrik SentinelOne 👌❤️
–Security you can rely on–
2026.08.02
————————————————
#CyberSecurity https://www.linkedin.com/posts/diyako-secure-bow_annual-cdr-report-cybersecurity-2026-activity-7489643618182340608-rl-G?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAXwLuQBD9tBET0AAFOnGrOQNaM1EWhmgM8 | 1 666 |
| 18 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
The cybersecurity market is entering a new phase.
After reviewing several 2025/26 industry reports, one trend is unmistakable: organizations are no longer asking "Which security product should we buy?" They are asking "How do we reduce cyber risk while enabling business growth?"
This shift marks the evolution of cybersecurity from a technology function to a business governance discipline.
The strongest investments in 2025/26 are focused on:
• Identity-first security architectures
• AI-driven threat detection and response
• SaaS and cloud security governance
• Cyber resilience and business continuity
• Security automation and exposure management
Yet, technology alone is not the differentiator.
Organizations continue to struggle with fragmented security architectures, disconnected tools, alert fatigue, skills shortages, and the absence of measurable cyber risk governance.
From a CISO perspective, the competitive advantage is no longer determined by the size of the security stack it is determined by the maturity of governance, visibility, and decision-making.
Cybersecurity leaders must transition from operating security controls to managing cyber risk as a strategic business function.
Executive Conclusion
The future belongs to organizations that integrate cybersecurity into corporate strategy, operational resilience, and executive decision-making. In 2025/26, cybersecurity maturity not technology acquisition will define sustainable business resilience and competitive advantage.
–Security you can rely on–
2026.07.23
————————————————
#CyberSecurity #CISO #CyberRisk #CyberResilience #Governance #SecurityLeadership #DigitalTransformation #RiskManagement #ZeroTrust #AI #ExecutiveLeadership #DiyakoSecureBow
https://www.linkedin.com/posts/diyako-secure-bow_cybersecurity-202526-activity-7486040226495377408-CwqF | 1 562 |
| 19 | #DiyakoSecureBow
————————————
CISO as a Service (vCISO)
Why Every Security Team Should Know Osquery:
Modern cybersecurity is no longer limited to firewalls, EDR, and SIEM platforms. The real challenge is obtaining accurate, real-time visibility into what is actually happening across endpoints.
Osquery addresses this challenge by transforming operating systems into relational databases. Instead of relying on proprietary agents or platform specific scripts, security teams can query endpoints using standard SQL to retrieve information about:
• Running processes and services
• Active network connections
• Installed software and patches
• User accounts and privileges
• Startup persistence mechanisms
• Scheduled tasks and cron jobs
• USB devices and hardware inventory
• Browser extensions
• File integrity changes
• System configuration and security posture
Why Osquery Matters?!
Organizations often struggle with fragmented visibility across Windows, Linux, and macOS. Osquery provides a unified telemetry layer that enables defenders to collect normalized data regardless of the operating system.
This significantly improves:
* Threat Hunting
* Digital Forensics
* Incident Response
* Asset Inventory
* Vulnerability Validation
* Compliance Monitoring
* Security Baseline Assessment
Beyond Asset Management
One of Osquery’s greatest strengths is its ability to support hypothesis-driven investigations. For example, during an incident responders can quickly answer questions such as:
* Which hosts executed PowerShell with suspicious arguments?
* Which endpoints contain an unexpected local administrator?
* Which systems have unsigned binaries running from temporary directories?
* Which devices established outbound connections to a suspicious IP?
* Which persistence mechanisms appeared after a specific date?
All through SQL-based queries executed at scale.
Integration with Modern SOC
Osquery becomes even more powerful when integrated with security ecosystems such as:
* FleetDM
* Velociraptor
* Elastic
* Splunk
* Microsoft Sentinel
* Wazuh
* TheHive
* SOAR platforms
This enables continuous monitoring and automated threat detection rather than relying solely on periodic scans.
Final Thoughts
Osquery is not an EDR replacement.
It is a high-value telemetry and visibility platform that complements existing security controls by providing deep endpoint intelligence, accelerating investigations, and enabling proactive threat hunting.
In mature cybersecurity programs, visibility is not a luxury it is the foundation of effective defense.
Special Thanks to
Uptycs 🙏♥️☺️
–Security you can rely on–
2026.07.17
————————————————
#CyberSecurity #ThreatHunting #Osquery #DFIR #IncidentResponse #SOC #BlueTeam #ThreatDetection #DigitalForensics #Linux #Windows #macOS #SecurityOperations #EndpointSecurity #DiyakoSecureBow
https://www.linkedin.com/posts/guide-2-osquery-2026-ugcPost-7483816364323868672-gPqF | 1 370 |
| 20 | Cybersecurity is an evolving discipline, and maintaining professional competence requires continuous learning.
I'm pleased to have completed additional ISACA Continuing Professional Education (CPE) requirements as part of my ongoing commitment to professional excellence and internationally recognized best practices.
Special Thanks to 👍💕👌
ISACA
ISACA Foundation
ISACA UAE
— CISO as a Service —
Strategic Cyber Defense & GRC
Resilient Through Knowledge
2026.07.14
#ISACA #CPE #InformationSecurity #CyberSecurity #Governance #RiskManagement #ProfessionalDevelopment
https://www.linkedin.com/posts/alirezaghahrood_isaca-cpe-ghahrood-2026-ugcPost-7482686338081751040-Y1Wf | 1 276 |
