Organizational Security Courses and Certifications

File Analysis with TruffleHog

In this cyber security course, you will learn to perform file analysis of source code repositories using the tool TruffleHog to keep your organization secure.

• Pluralsight
• 24 minutes
• On-Demand
• Free Trial Available

0xdade

Resistance Isn't Futile - A Practical Approach to Prioritizing Defenses with Threat Modeling

Practical approach to threat modeling for prioritizing defenses. Learn to identify relevant adversaries, match them to your organization, and take action to improve security posture.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Security BSides London

Bug Bounties - Crowdsourcing Nosey Bastards

Explore the complexities of bug bounty programs, their effectiveness, and hidden challenges. Gain insights into hunter archetypes and the paradoxical nature of crowdsourced security testing.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Security BSides San Francisco

Concrete Steps to Create a Security Culture

Practical strategies for fostering a strong security culture in organizations, with actionable examples and insights on measuring success in cultural change initiatives.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

RSA Conference

Infosec Makeover - Love it or Leave it, Product Security is Here to Stay

Explore the emerging field of Product Security, its importance in organizations, and strategies for building effective teams, including insights on hiring Product Security Engineers in Central Europe.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Security BSides London

Spear Phishing - From Linkedin To Loggedin

Explore the rise of spear phishing, learn to identify vulnerable targets through social media, and discover effective protection strategies for individuals and organizations.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

RSA Conference

Ascending the Path to Better Security

Explore methods to measure and enhance security approaches, enabling business growth and improved protection against evolving threats in today's complex cybersecurity landscape.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

RSA Conference

Security Awareness Training for the Remote Workforce

Strategies for maintaining security awareness culture in remote work environments, including tips for expanding training programs and ensuring continued vigilance among distributed teams.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

USENIX Enigma Conference

Moving Fast and Breaking Things - Security Misconfigurations in Practice

Exploring system operators' perspectives on security misconfigurations, analyzing root causes, and providing practical recommendations to reduce their frequency and impact in organizations.

• YouTube
• 20 minutes
• On-Demand
• Free Video

USENIX Enigma Conference

If Red Teaming Is Easy - You're Doing It Wrong

Explore the challenges and complexities of effective Red Teaming in cybersecurity, going beyond simple penetration testing to improve organizational defenses through a comprehensive adversarial perspective.

• YouTube
• 19 minutes
• On-Demand
• Free Video

LASCON

Leveraging Social Engineering in Physical Security Assessment - 2017

Explore techniques for leveraging social engineering in physical security assessments, enhancing your ability to identify vulnerabilities and strengthen organizational defenses.

• YouTube
• 46 minutes
• On-Demand
• Free Video

LASCON

Realizing Software Security Maturity - The Growing Pains and Gains

Explore the challenges and opportunities of implementing a comprehensive application security program using the Software Assurance Maturity Model (SAMM) to guide success beyond basic OWASP Top 10 compliance.

• YouTube
• 47 minutes
• On-Demand
• Free Video

LASCON

Irrational but Effective - Applying Parenthood Lessons to Cybersecurity

Explore how parenthood lessons can enhance cybersecurity leadership, using humor and concrete examples to draw parallels and improve security practices.

• YouTube
• 40 minutes
• On-Demand
• Free Video

LASCON

Social Engineering Metrics: Using Data Science for Valuable Reporting

Innovative approach to social engineering metrics using data science, focusing on meaningful measurements that reflect an organization's security posture and culture beyond traditional click rates.

• YouTube
• 44 minutes
• On-Demand
• Free Video

LASCON

Assessing Software Security Initiative Maturity: OpenSAMM and BSIMM Comparison - 2019

Explore OpenSAMM and BSIMM methodologies for evaluating software security maturity, comparing their features and learning best practices for implementation.

• YouTube
• 44 minutes
• On-Demand
• Free Video