CISO Tradecraft® cover image

CISO Tradecraft®

#168 - Cybersecurity First Principles (with Rick Howard)

Feb 12, 2024
Rick Howard, Chief Security Officer, Chief Analyst and Senior Fellow at CyberWire, discusses cybersecurity first principles and the importance of understanding materiality and time bound risk assessment. He also highlights the value of Fermi estimates and Bayes algorithm for risk calculation. Rick and the host reflect on their experiences during 9/11 and Rick introduces his book, 'Cybersecurity First Principles'.
47:14

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

  • Adopting first principles thinking in cybersecurity helps organizations make more effective decisions by reducing the probability of material impact from cyber events.
  • CISOs should communicate cybersecurity strategies in business terms that align with the organization's risk appetite to gain support and build relationships with senior leaders.

Deep dives

The Importance of First Principles in Cybersecurity

In this podcast episode, the guest, Rick Howard, discusses the concept of first principles in cybersecurity. He explains that many security practitioners focus on tactical approaches without considering if they are moving in the right direction. By adopting first principles thinking, which involves reducing the probability of material impact due to a cyber event, organizations can make more effective cybersecurity decisions. Rick emphasizes the importance of calculating risk probability and using Bayesian estimation to make informed assessments. He also highlights the need for CISOs to communicate cybersecurity strategies to senior leaders in business terms that align with the organization's risk appetite.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode