Episode 33 – 3 Pillars for Starting a Security Program

Purple Squad Security

In this episode John goes at it alone and discusses his own experiences with starting up a security program at different organizations by focusing in on what he views are the 3 key pillars for a new security program. Some links of interest:

---

• CIS Critical Security Controls - https://www.cisecurity.org/controls/

• Malware Archeology - Logging Cheat Sheets - https://www.malwarearchaeology.com/cheat-sheets/

• Linux Security Incident Log Review Checklist - https://zeltser.com/security-incident-log-review-checklist/

• SANS Log Management In-Depth - https://www.sans.org/brochure/course/log-management-in-depth/6

• OWASP Logging Cheat Sheet - https://www.owasp.org/index.php/Logging_Cheat_Sheet

• Defensive Security Handbook - http://shop.oreilly.com/product/0636920051671.do

---

Want to reach out to the show? There's a few ways to get in touch!

---

• Show's Twitter: @PurpleSquadSec

• John's Twitter: @JohnsNotHere

• Podcast Website: purplesquadsec.com

• Sign-Up for our Slack community: https://signup.purplesquadsec.com

---

Thanks for listening, and as always, I will talk with you all again next time.

Find out more at http://purplesquadsec.com