Skip to content

Cybersecurity Insights with Contrast CISO David Lindner | 11/10

By David Lindner, Chief Information Security Officer

November 10, 2023

AI threat modeling remediation

    
Cybersecurity Insights with Contrast CISO David Lindner | 11/10

Insight #1

The U.S. has launched the Shields Ready campaign: a campaign “about making resilience during incidents a reality by taking action before incidents occur.” I love this focus on critical national infrastructure with a heavy reliance on threat modeling and risk assessments. I look forward to the Cybersecurity & Infrastructure Security Agency (CISA) pushing this forward.

Insight #2

We need a shift in the security market to fixing instead of just finding. Yes, finding is important, but if you are reporting on the number of risks you find and not anything about how quickly you are fixing or mitigating the issues, it's time to rethink that.

Insight #3

Research has found that 54% of businesses want Artificial Intelligence (AI) regulation so they can feel comfortable investing in it. When it comes to security leaders, 95% want regulation for AI in cybersecurity. These are interesting stats: They show the difference in business and security concerns and should scream to businesses that security is a business problem.
AI threat modeling remediation
David Lindner, Chief Information Security Officer

David Lindner, Chief Information Security Officer

David is an experienced application security professional with over 20 years in cybersecurity. In addition to serving as the chief information security officer, David leads the Contrast Labs team that is focused on analyzing threat intelligence to help enterprise clients develop more proactive approaches to their application security programs. Throughout his career, David has worked within multiple disciplines in the security field—from application development, to network architecture design and support, to IT security and consulting, to security training, to application security. Over the past decade, David has specialized in all things related to mobile applications and securing them. He has worked with many clients across industry sectors, including financial, government, automobile, healthcare, and retail. David is an active participant in numerous bug bounty programs.

Previous

Four things CISOs should do NOW to protect from being scapegoated
Next

Attack-path mapping your applications