Ambassador

Chris Cooper

Fractional CISO at Rougemont Security

United KingdomVerified Community Ambassador

Identified Expertise

Content Chris is Following

Please join or sign in to view Chris's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

Sometimes

View Results

111.2k views126 Upvotes59 Comments

Are you happy in your current role?

People & Leadership Talent Management & Performance

Yes

Unsure

View Results

32k views18 Upvotes16 Comments

To drive digital innovation, do you attend demos by tech startups / companies?

Disruptive & Emerging Technologies

Never Tried

Tried but discontinued

Trying but needs work

Adopted but impact is unclear

Adopted with measurable impact

View Results

6.8k views2 Upvotes3 Comments

Office 365 or Google suite for global business? If you moved from one to the other, what were some of the reasons? What worked out well or not so well?

End-User Services & Collaboration Applications & Platforms

Office 365

Google Business Suite

15.3k views14 Upvotes36 Comments

Do you think a recession will hit the US economy?

News

Yes

Unsure

View Results

15.3k views5 Upvotes2 Comments

Which tech company would you be most proud to work at?

Culture & Values

Facebook

Google

Amazon

Tesla

Other (please comment)

View Results

14.2k views8 Upvotes26 Comments

What’s the best software development methodology for enterprise-level projects?

Technical Product Management Software Development Management Tools+1 more

Waterfall

Prototype

Rapid Application Development

Agile Scrum

Agile Kanban

Dynamic System Development

Lean Software Development

Other .. please add it down

View Results

27.3k views9 Upvotes15 Comments

Are concerns about lock-ins with the public cloud leading you to adopt a multi-cloud strategy?

Strategy & Architecture Cloud

Yes

If I told you I'd have to kill you

View Results

5.8k views2 Comments

Are you taking vendor calls right now?

Business Applications

Yes

3.7k views1 Upvote2 Comments

How would you describe cybersecurity regulation in the US as of today?

Security & GRC Regulatory Compliance Data Privacy

Too strict

Somewhat strict

Just about right

Somewhat lenient

Very lenient

View Results

4.2k views1 Comment

Working as a Fractional CISO, one of the challenges is keeping track of all the management information for each client. Everything from risks, audits, vulnerability management etc. Have you tried any vCISO type management tools and were they any good? Or have you repurposed a different tool to achieve the same purpose?

Security & GRC

Chris CooperFractional CISO at Rougemont Security in Telecommunication5 months ago

Hi there! We used to handle risk management and compliance assessment work manually using Excel spreadsheets or an in-house developed tool. It was a painful process that made it difficult to track approval processes, causing ...read more

221 views1 Comment

In our organization, we regularly distribute cybersecurity awareness emailers to keep users informed about new attacks and threats. However, we are interested in understanding how other organizations measure the impact of these awareness initiatives on their users. Specifically, we are concerned about potential methods for assessment, such as quizzes, where there might be a possibility of cheating. Could you please share the methods you use to evaluate the effectiveness of your cybersecurity awareness programs and how you address issues like cheating?

Chris CooperFractional CISO at Rougemont Security in Telecommunication2 months ago

Effectiveness through testing of knowledge is different than testing through desired behavior. Awareness programs should measure the ability to educate towards consistently identifying and treating threats in a safe and ...read more

Read More Comments

114 views5 Comments

I'm looking to establish the most effective communication strategies for disseminating crucial information (such as road closures, weather updates, and active shooter alerts) to airport stakeholders, including Uber drivers, skycaps, security personnel, public works, and contractors. - Is Everbridge and Microsoft Teams viable for these types of communications? - What are the best practices or other recommended platforms for ensuring rapid and reliable communication in such scenarios?

Security & GRC Management Tools

Chris CooperFractional CISO at Rougemont Security in Telecommunication3 months ago

It is not entirely clear from your question whether you want push notifications (i.e. one-way) or bi-directional (two-way) communications, but I am going to assume the previous.

Tools like Microsoft Teams are not great ...read more

Read More Comments

1.3k views1 Upvote3 Comments

What MDR solutions would you consider good options for an SMB with a fairly new cyber program/limited infosec staff? Interested to hear which options would have the fastest time to value.

Threat & Vulnerability Management Threat Intelligence & Incident Response Enterprise Applications

Chris CooperFractional CISO at Rougemont Security in Telecommunication5 months ago

That is a tricky question as it very much depends on your technical environment and also any sensitive assets such as Intellectual Property or PII Data.

In most cases with a small team, it is more cost-effective overall ...read more

Read More Comments

163 views2 Comments

Current DLP vendor? Pros/Cons. Integration issues, difficulties of implementation, ongoing administration concerns.

Vendor/Product Recommendation Security & GRC Contact Center & Telecom+1 more

Chris CooperFractional CISO at Rougemont Security in Telecommunication7 months ago

My last deployment of DLP was using Microsoft Purview. The main pro being that it is part of Azure365/Office365 so is designed to work with and be integrated into those apps.

That said, as with any DLP it is typically ...read more

330 views1 Comment

Have you added any GenAI tools to your DevSecOps pipeline, or are you still worried about introducing security problems?

AI & Machine Learning Generative AI Engineering+1 more

Chris CooperFractional CISO at Rougemont Security in Telecommunication7 months ago

Its not something that we have directly integrated yet, but we are experimenting with GenAI to see how it performs at identifying some of the more basic security risks.

1.7k views1 Comment

If you’ve implemented SIEM, what solution are you using?

Security & GRC Threat Intelligence & Incident Response Security Operations Center (SOC)+1 more

Chris CooperFractional CISO at Rougemont Security in Telecommunication9 months ago

Last year I started implementing Wazuh (based on Elastic stack). I was effective, with both M365 technologies and AWS. Also have the advantage that the agent is running on Windows, MacOS and Linux. If you play a litlle bit ...read more

Read More Comments

4.2k views6 Comments

Have you changed your approach to succession planning over the past couple years? How?

People & Leadership Security & GRC Security Strategy & Roadmap

Chris CooperFractional CISO at Rougemont Security in Telecommunication10 months ago

Yes. For succession, we look at folks who can replace you. In last 1.5 years, I realized it should be the person who can outshine you

Read More Comments

2.5k views2 Comments

Any recommendations for improving communication between your IT/infosec teams? Specifically when it comes to teams working on patching/remediation.

Security & GRC Threat & Vulnerability Management Threat Intelligence & Incident Response+1 more

Chris CooperFractional CISO at Rougemont Security in Telecommunication10 months ago

Can you please share a little more information about your current challenges? I'm wondering what communication channels you are already using, what's not working, etc.?

Read More Comments

4.6k views9 Comments