Actionable Resources To Help You Protect Your Business From Cyber Attacks & Be A Better CISO

Will there come a day where there are 0 vulnerabilities to find?

There's a growing potential for AI to remove many sources of vulnerabilities, but does that mean we're going to see a day where code is being written without any vulnerabilities being introduced into systems?

How do you work out MTTR (Mean Time to Response)?

MTTR is all about looking at where you're handing your information over to the people who are responsible for fixing the vulnerabilities. Once it's handed over, the process has begun. So, we know where the timer starts, but where does it end? When have we determined that the response period is finished?

What metrics are important?

There can be disparities between a security tester's priority metrics regarding vulnerabilities and those of the wider organisation. So, which metrics are actually the most important?

How to make dynamic testing work for DevOps teams?

One of the challenges of introducing DAST (Dynamic Application Security Testing) into DevOps, like when we were able to introduce SAST (Static Application Security Testing), is speed. It's much slower. So, how can we make this more efficient for our DevOps teams?