X
Back to blog

CISO Thoughts with David Lindner - March 18th

By David Lindner, Chief Information Security Officer

March 18, 2022

Insight #1

If you can accomplish one thing in your AppSec program this year, it should be keeping secrets out of your source code. The number of secrets in source code is doubling year over year, which will lead to more breaches. There are many options to detect secrets both pre and post-commit, implement them both today!

Insight #2

Security is all about the relationships you build. This is especially true for application security professionals. We must have close bonds with our development teams, to not only understand and empathize with their deadlines but also to understand the implications of any security imposed changes. Pick up the phone, open a Zoom call, build those relationships and your success metrics will improve.

 

Insight #3

President Joe Biden signed the Cyber Incident Reporting For Critical Infrastructure Act of 2022. This act requires critical infrastructure entities and federal government agencies to report cybersecurity incidents within 72hrs of an incident. Transparency is a key component in the cyber security world and can lead to preventing future exploits. If you don’t fall in the defined entities, I would still strongly suggest you follow the requirements to report incidents in a similar fashion.
Thought Leaders
David Lindner, Chief Information Security Officer

David Lindner, Chief Information Security Officer

David is an experienced application security professional with over 20 years in cybersecurity. In addition to serving as the chief information security officer, David leads the Contrast Labs team that is focused on analyzing threat intelligence to help enterprise clients develop more proactive approaches to their application security programs. Throughout his career, David has worked within multiple disciplines in the security field—from application development, to network architecture design and support, to IT security and consulting, to security training, to application security. Over the past decade, David has specialized in all things related to mobile applications and securing them. He has worked with many clients across industry sectors, including financial, government, automobile, healthcare, and retail. David is an active participant in numerous bug bounty programs.

Previous

New Gartner® Report Details How Businesses Should Incorporate SBOMS Into The SDLC
Next

Cyber Incident Reporting For Critical Infrastructure Act of 2022
Enlarged Image