The Infosec Staff Comp & Career Benchmark Survey, 2024–2025 is live! Take the new streamlined survey in only 5 minutes! Receive in-depth reports with new career and comp insights including refined infosec role categories that better reflect the market. The results, from you and your peers, enable you to make data-driven decisions around your comp level, assess career paths and your work-life balance. Take the survey today: https://bit.ly/4aj82LB #securityleaders #securityorgs #retention #cybercareers #cyberjobs
IANS
Computer and Network Security
Boston, MA 10,159 followers
We've got real world answers for your cyber problems.
About us
For the security practitioner caught between rapidly evolving threats and demanding executives, IANS Research is a clear-headed resource for decision-making and articulating risk. We provide experience-based security insights for Chief Information Security Officers and their teams. The core of our value comes from the IANS Faculty, a network of seasoned practitioners. We support client decisions and executive communications with Ask-an-Expert inquiries, our peer community, deployment-focused reports, tools and templates, and consulting.
- Website
-
https://www.iansresearch.com/
External link for IANS
- Industry
- Computer and Network Security
- Company size
- 51-200 employees
- Headquarters
- Boston, MA
- Type
- Privately Held
- Founded
- 2001
- Specialties
- Information Security, Decision Support, Peer-Based Research, and Faculty-Driven Insights
Locations
-
Primary
2 Center Plaza
Suite 500
Boston, MA 02108, US
Employees at IANS
-
😷 Adam Shostack
Leading expert in threat modeling + secure by design. Training • Consulting • Expert Witness. "Threat Modeling" + "Threats: What every Engineer…
-
Shannon Lietz
✮ Co-Founder & CEO @ ThirdScore | ✏️ Writes lots of free content about Tech Influences | 🎒 Specializes in Start-ups, Culture Hacking…
-
Alex Sharpe
Board Member, Advisor, Speaker, Author Cyber Governance | Resilience | AI | Digital Transformation | Digital Trust | Zero Trust | CMMC | GRC |…
-
Raffael Marty
EVP | GM | Investor | Author | Speaker | Advisor
Updates
-
Need to firm up Infosec role definitions, comp & career paths?💼 By taking the Staff Comp & Career Survey you’ll receive in depth reports that power comp discussions and boost careers. Take the survey today: https://bit.ly/3XsLfd1 #cybersecurity #infosec #ciso #securitybudget #securitystaff
-
-
We kicked back last week for some summer fun, excellent food and friendly competition with awesome friends and colleagues! 😎 #iansresearch #companyculture
Our annual Thompson Island outing has always been my favorite. I always walk away so appreciative & grateful for the remarkable folks at IANS. #ians #companyculture #companyouting
-
-
Building AI guardrails includes thinking about schools and universities - Now that back to school 🏫 is in full swing, check out IANS Faculty Alex Sharpe's helpful post below. Drop by our AI Resources page for more AI guardrail guidance: https://lnkd.in/e8wMZJ-f #ai #aiguardrails #aieducation #airesources
Board Member, Advisor, Speaker, Author Cyber Governance | Resilience | AI | Digital Transformation | Digital Trust | Zero Trust | CMMC | GRC | Complex Program Management | M&A "Where you are the hero of the story"
Establishing practices to ensure the safety and security of #AI without stifling innovation can be confusing. History shows that establishing guardrails allows us to learn and grow. When we have a better handle on the situation, we can consider being more prescriptive. What does a guardrail look like? How do we document? How do we communicate? How do we evolve? The American Federation of Teachers (AFT) published “Guardrails for Artificial Intelligence in Nation’s Classrooms.” It is an excellent template for other sectors and organizations to use as a example when building their guardrails. ➢ The Press Release can be found here. https://lnkd.in/dBT9mYQp ➢ The guardrails can be found here. https://lnkd.in/dYak6Gek When asked, I usually provide the following advice: ➢ presume something will go wrong (not if) as you explore the use of AI to drive value. ➢ limit the blast radius to minimize the impact when (also not if) something goes wrong. ➢choose Use Cases that limit the damage when something goes wrong. You can explore riskier use cases as you evolve. The EU AI Act follows the philosophy of some use cases being more risky than others. The risk presented by an automated customer service agent is very different than the risk presented by an autonomous weapon system. ➢ Never forget that “good ideas are often behind a few bad ones.” Foster a culture where failure is rewarded, provided you learn and improve. ➢ AI has been with us for decades. The average person has used AI and has benefited from AI without knowing it. Just because it became the mainstream buzz in the fall of 2022 does not mean you cannot benefit from the history and lessons learned before that. Randi Weingarten Kyle Hauptman Omar Khawaja Sophia Velastegui Eric Lankford Jon Washburn David LaFalce Douglas Levin Shiva Rajgopal Ryan McManus Jennie Carom Pike MARK THOMAS Candy (CK) Allums Mark Orsi Dmitry Raidman Daniel Bardenstein Richard (Dick) Brooks Marc Frankel Helen Oakley Joseph Silvia, MBA Katie Boswell Kristy Hornland Joel Caminer Abhijit Chitnis Patrick M. Brian Katula #cybersecurity #cloud #riskmanagement #informationsecurity #resilience #privacy #cyberwarfare #ecommerce #business #strategy #artificialintelligence
-
-
Watch IANS Faculty member Adrian Sanabria discuss key nuances in vulnerability disclosure. #vulnerabilties #cybersecurity
Words REALLY matter when it comes to vulnerability disclosure. A few weeks ago, Darwin Salazar, MSc, Katie T., and myself talked about a critical RCE in the Windows IPv6 stack - CVE-2024-38063. IPv6 has been on by default for ~15 years, so the attack surface is huge. Thanks to a POC and a writeup by Marcus Hutchins (https://lnkd.in/edpUQKAc), we now know that this should have been labeled as denial-of-service, not remote code execution. Why does this distinction matter? A DoS could take down hundreds or thousands of machines very quickly - a nightmare scenario for a cloud/hosting provider or online gaming company. Probably less of a concern for a bank or cryptocurrency exchange, who would be more concerned about RCE vulns. With tens of thousands of vulns discovered every year, security teams have to prioritize where they spend their time. To do that, vulnerabilities need to be correctly labeled! https://lnkd.in/e39sXu73
-
Read IANS Faculty member, Bob Chaput's blog and learn how to avoid GenAI phishing attacks by adopting a zero-trust philosophy. Want more AI guidance? Visit our AI Resources for Success 💡 page: https://lnkd.in/e4AigucU #genai #aiphishing #cybersecurity
As I've explained in Stop the Cyber Bleeding, while there may be few visible rewards for preventing a phishing or hacking attack, the consequences of failing to do so can be catastrophic. A cyber event can severely impact an organization’s revenue and margins, and in the healthcare sector, it can even put the entire organization out of business. Avoid phishing attacks by adopting a zero-trust philosophy—' never trust, always verify'—and cultivating a security-first culture. #Phishing #ECRM #ZeroTrust #RiskManagement
-
Want to help firm up infosec role definitions, comp & career paths? By taking the Staff Comp & Career Survey you’ll receive in depth reports that power comp discussions and boost careers. Take the survey today: https://lnkd.in/euBDUMtP #cybersecurity #infosec #ciso #securitybudget #securitystaff
Role definition, compensation & career paths in infosec are still too squishy. IANS wants to fix this with our Staff Comp & Career Survey. Please, take a few minutes & fill it out – you’ll be helping your peers, and, of course, we'll send you the data when it gets compiled. See the link below. #cybersecurity #infosec #ciso #securitybudget #securitystaff
-
-
Congrats to IANS Faculty member Jessica Hebenstreit on her DEF CON achievement! #infosec #ciso #cybersecurity #defcon
View my verified achievement from DEF CON.
DEF CON 32 Goon was issued by DEF CON to Jessica Hebenstreit.
credly.com
-
Stay one step ahead of C-suite inquiries when security breaches make the news. Sign up for a free trial subscription of the Daily Dive. Start your day with key infosec news and be threat proactive. Begin your free trial today: https://bit.ly/4evoQ5v #CISOs #securitynewsstories #informationsecurity #securitythreats #enterpriserisk
-
-
Need tips for effective board reporting? IANS Faculty Paul Connelly, NACD-DC explores the critical aspects of board reporting within the cybersecurity landscape, providing insights, strategies, and best practices for communicating effectively with organizational stakeholders. Watch the webinar: https://bit.ly/4cBLvus Want more hands-on guidance to easily create board-ready metrics? Find it here: https://bit.ly/3SXJbqU #infosec #boardreporting #cisos #securityleaders
Effective Board Reporting for Cyber Leaders