Home
Claude Mandy

Ambassador

Claude Mandy

Data Security Nerd

United StatesVerified Community Ambassador

Identified Expertise

Strategy & Architecture3
Security & GRC3
Risk Management3
Security Strategy & Roadmap2
Peer Insights2

Engagement Stats

11
Answers Written

4.7K
Profile Views

6
Upvotes Received

Content Claude is Following

Please join or sign in to view Claude's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

No

Sometimes

View Results

111.2k views126 Upvotes59 Comments

Which platform has been better at addressing security concerns?

Contact Center & Telecom Productivity Tools

Zoom

Microsoft Teams

Both have addressed concerns well

Neither

View Results

3.3k views1 Upvote

Which do you prefer to use at your organization?

Kubernetes

Docker

Other

View Results

5.3k views2 Comments

Are you expected to work beyond usual business hours?

People & Leadership Culture & Values Business Relationships

Yes

No

998 views

What's the best way to control cloud sprawl?

Cloud Strategy & Architecture

Regular audits

Role based Identity

Policy and protocols

Change mgmt platform

Other (please comment)

View Results

5.2k views3 Comments

What's more important for a CIO to have? Technical background or business background

People & Leadership

Techical background

Business background

3.5k views2 Upvotes5 Comments

For Peer Insights polls and studies, would you prefer to get:

A guaranteed number of Gift card points per answer

A 10% chance to get 10X Gift card points per answer

A 1% chance to get 100X Gift card points per answer

View Results

1.9k views3 Upvotes

When evaluating data security solutions, which of the following is your top priority?

Strategy & Architecture Governance, Risk & Compliance Data & Analytics+5 more

Solution cost

Effectiveness

End-to-end platform offering

Implementation

Integration

Solution management overhead

Other

View Results

3.4k views3 Comments

Is security training at your organization personalized to the employees?

Security & GRC Threat & Vulnerability Management Training & Certification

Yes

Somewhat

No

View Results

3.4k views

Does your organization have a “bring your own device” (BYOD) policy?

Device Management Risk Management Data Protection & Encryption

Yes

Yes, but we plan to end it.

No, but we used to.

No, we've never had a BYOD policy.

View Results

3.1k views1 Comment

I’m building a list of the leading thinkers and practitioners of modern data security. Who is on your list? Especially at the forefront of quantum resistant encryption and AI security?

Security & GRC Database Data Privacy+1 more

Claude MandyData Security Nerd in IT Servicesa year ago

Except security professional plz consider lawyers and tech journalist to complete the team.

2.8k views1 Comment

With Wiz adding ”DSPM” or rather data classification, do you see there being much need for DSPM on top of CSPM? I feel like the DLP and Detection and Response are way more important than CSPM checks, but is that just me?

Database Data Protection & Encryption IaaS

Claude MandyData Security Nerd in IT Servicesa year ago

CSPM and DSPM are two distinct strategies for cybersecurity. While there might be some overlapping areas, there are key differences between them.

CSPM focuses on protecting the cloud infrastructure and its resources, ...read more

4

Read More Comments

698 views4 Comments

I am interested in learning more about Data Security Posture Management (DSPM) vendors. Could you share your insights and experiences regarding their strengths, weaknesses, and any notable challenges you've encountered?

Security Strategy & Roadmap Security Data Privacy+1 more

Claude MandyData Security Nerd in IT Services3 months ago

I strongly recommend Forcepoint. They have an easy to deploy tool which will show you your data risks across your entire environments (most DSPM tools are limited to cloud only) in a very short timeframe. Also, you can remediate ...read more

Read More Comments

399 views2 Comments

How is your decision making impacted when you hear news of a major cyber attack? Is it just another news story to you, or do these attacks ever make you rethink your current security posture?

Security & GRC Security Strategy & Roadmap Threat Intelligence & Incident Response+1 more

Claude MandyData Security Nerd in IT Servicesa year ago

Every major cyber attack should be an opportunity to proactively review your security posture, BUT UNFORTUNATELY most news of cyber attacks lack the radical transparency to do so. This means it often is an exercise in futility. ...read more

1

1.6k views1 Upvote1 Comment

What emerging tech/tools do you think could be game-changers for managing convergent data breach risks?

Security & GRC Risk Management Security Strategy & Roadmap+1 more

Claude MandyData Security Nerd in IT Servicesa year ago

Data Security Posture Management tools (with Data detection and response capabilities) are going to be essential. DISCLAIMER: I work for one after many years as a Gartner analyst

1

Read More Comments

4.7k views2 Upvotes2 Comments

What are the advantages to having a Unified Compliance Framework of Infosec? And is this acceptable globally?

Claude MandyData Security Nerd in IT Servicesa year ago

One of the advantages is the reduction of the costs, overhead, confusion and redundancy of multiple mappings from the same controls to numerous audits and certifications.

2

Read More Comments

3.7k views5 Comments

Any advice on how to best secure/monitor domain admin and higher-level access service accounts? It would be nice to have more detailed alerts regarding activity with these accounts than just if the account is locked. We are an Azure/AD shop. We have Arctic Wolf as our SOC.

Identity & Access Management (IAM)

Claude MandyData Security Nerd in IT Servicesa year ago

Getting understanding of the ability for these accounts to read, update and delete data is essential and monitoring their actual activity is essential and can be provided through new DSPM tools

Read More Comments

1.8k views2 Comments

Can anyone share best practices for implementing salting in hash functions?

Security & GRC Data Protection & Encryption Security Strategy & Roadmap+1 more

Claude MandyData Security Nerd in IT Servicesa year ago

Adding few steps for your support -

1. Create an unrepeated salts for each and every applications or services.
2. Combine the salt with a strong alphanumeric password
3. Always have strong and long hash algo
4. ...read more

Read More Comments

355 views2 Comments

How often do you do phishing campaigns?

Claude MandyData Security Nerd in IT Servicesa year ago

Are we sure that phisingtests are not doing more harm then they solve? Business is bussy and those test dont reflect the reality of nowadays stellar phishs. I think better to invest in phishing resistant authentication so ...read more

2 1 Reply

Read More Comments

6.8k views8 Upvotes20 Comments

We are considering implementing a process to provide our colleagues with a "backup" laptop to ensure business continuity in the hopefully unlikely event a ransomware attack would impact their hard drives. We have discussed everything from providing two systems, with one remaining "on the shelf" to having backups ready to deploy (which would include shipping for remote colleagues). Obviously each of these scenarios are without challenges and I'm curious if anyone else has implemented a similar process and would be willing to share some suggestions and/or lessons learned?

Process Management Strategy & Architecture Peer Insights+2 more

Claude MandyData Security Nerd in IT Servicesa year ago

Have you looked at the use of virtual desktops that can quickly be provisioned to provide access and would allow access from non-corporate devices in emergencies? Reducing the impact of any supply chain or shipping delays ...read more

2

Read More Comments

248 views3 Comments