Ambassador

Dr Aaron Isaacs

Director, IT Security

United StatesVerified Community Ambassador

Identified Expertise

Content Dr Aaron is Following

Please join or sign in to view Dr Aaron's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you have remote employees on your team?

Talent Management & Performance

Yes

16.4k views7 Upvotes7 Comments

What is your biggest security concern with a remote workforce?

Strategy & Architecture End-User Services & Collaboration People & Leadership+4 more

Isolated IT assets

Limited remediation ability

Phishing attacks

Password sharing

Unsecure networks

Using personal devices for work

Using work devices for personal

View Results

3.9k views2 Upvotes2 Comments

Do you encourage users to use different passwords between work and personal accounts?

Security & GRC Identity & Access Management (IAM)Data Privacy+3 more

Yes

2.9k views2 Comments

Do you implement a Password Blocklist to prevent users from using common words or phrases in their passwords?

Security & GRC Identity & Access Management (IAM)Data Privacy+3 more

Yes

Unsure

View Results

6.1k views

What hurts the most during your job hunt?

People & Leadership

No response

Automatic rejection

An interview with no follow up

Finding out you are the #2 pick

Other (comment below!)

View Results

11.4k views3 Upvotes2 Comments

Who has the most influence, outside the final decision maker, with regards to choosing technology vendors, data integrations, and API connectivity?

Cloud Engineering Data & Analytics+10 more

Product Management

Developers/Engineers

Finance

Legal

C-Suite

View Results

3.9k views4 Comments

Which SASE vendors are you currently assessing?

Cloud Network Infrastructure

Cato

Cisco

Cloudflare

Forcepoint

Fortinet

Open Systems

Palo Alto Networks

Versa

VMWare

ZScaler

None of these

View Results

1.9k views

Which billing frequency do the largest percentage of your SaaS apps fall into?

People & Leadership Strategy & Architecture Cloud+14 more

Monthly

Quarterly

Annually

View Results

3.5k views1 Comment

What is the biggest barrier to adopting cloud initiatives at your organization?

Cloud Public Cloud Hybrid Cloud+4 more

Cloud Security

Compliance

Lack of Cloud Skills

Large Investments in on-prem data center(s)

Lack of Buy-in from Leadership/Business

Other (comment below!)

View Results

2k views1 Upvote2 Comments

The shift to Work from Home has created more efficient processes and workflows that will last post-pandemic.

People & Leadership Strategy & Architecture Process Management+2 more

True

False

1.4k views

Any low code/no code, free or inexpensive solutions for executive dashboards and reporting? Specifically for Windows Updates and other reporting metrics and SLAs specific to IT Security? WSUS and Tenable reports are insufficient in providing updates and risk reporting granularity.

Feedback KPIs, Metrics & Reporting Security+2 more

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)4 months ago

We are building a single dashboard via PowerBI. We includes data from our Tenable as well as our exception. The dashboard also includes sending reminder features for open vulnerabilities which we set for every 30 days, 15 ...read more

Read More Comments

286 views3 Comments

Current DLP vendor? Pros/Cons. Integration issues, difficulties of implementation, ongoing administration concerns.

Vendor/Product Recommendation Security & GRC Contact Center & Telecom+1 more

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

My last deployment of DLP was using Microsoft Purview. The main pro being that it is part of Azure365/Office365 so is designed to work with and be integrated into those apps.

That said, as with any DLP it is typically ...read more

330 views1 Comment

Which vendor or tool is your preferred for cloud security? One tool will never suffice, but as we expand to cloud development, we are looking for code to cloud security, SDLC, vulnerability testing, secdevops, etc.

Cloud Security & GRC

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)8 months ago

Different regions may have different requirements. It's important to know what cyber framework your vendor is compliant with (i.e. NIST, Essential 8, ISO27001, etc.). Also, you get a lot of out of the box /in-built security ...read more

Read More Comments

1.8k views2 Comments

How has your zero trust strategy shifted in the last year, if at all? (And if nothing’s changed, how are you thinking about evolving it in the next year or so?)

Zero Trust Identity & Access Management (IAM)Security Strategy & Roadmap

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)6 months ago

There are components of zero trust we're working on adopting, but overall, it's not a core focus given other priorities. There's a lot of investment required to get to true zero trust along with a shift in user behavior that ...read more

Read More Comments

642 views3 Comments

What questions should a new security leader ask before starting the journey of vendor consolidation?

Vendor Management Security Strategy & Roadmap Security & GRC

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

The "why" is broad but important. Are you addressing gaps in security? Are you adding value to the overall security? Are you going to be addressing everything that you have, or are you going to be leaving any holes ...read more

Read More Comments

333 views3 Comments

What strategies can you use to avoid creating a single point of failure?

Security Strategy & Roadmap Vendor Management Risk Management

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

Vendor risk management and understanding your vendor is crucial. It's also important to understand where redundancies might be and ensure they are in place if you choose to go forward. For instance, if you're heavily ...read more

1 Reply

Read More Comments

309 views3 Comments

Are leaders underestimating the risk of vendor lock-in as they pursue consolidation? How do you strike the right balance to mitigate that risk?

Vendor Management Security Strategy & Roadmap Risk Management

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

In my experience, the organizations I've been a part of have been quite aware of the risks associated with vendor lock-in. The CIOs I've interacted with understand the potential risk and are able to balance it against ...read more

Read More Comments

300 views3 Comments

Among all the tools currently used by business units other than IT and security at your organization, have you managed to leverage any for security purposes? Which ones would those be?

Security Strategy & Roadmap Security & GRC Applications & Platforms

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

We have not managed to leverage any tools used by other business units for security purposes. It is usually the reverse of that. In my experience, IT is the one driving standards and other business units might be trying to ...read more

Read More Comments

287 views2 Comments

When your organization acquires other companies, what impact does this have on your vendor consolidation journey?

Vendor Management Security Strategy & Roadmap Security & GRC

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

When we acquire companies, we have to answer a new set of questions. We need to understand why the acquired company selected certain vendors, their strategy in terms of vendor consolidation or best of breed, and whether we ...read more

Read More Comments

258 views3 Comments

How can you convincingly sell the idea of vendor consolidation to skeptical stakeholders and executive leadership?

Security Strategy & Roadmap Security & GRC Vendor Management

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

The key to selling the idea of vendor consolidation lies in effective communication. Initially, it's beneficial to secure an executive sponsor who can support the initiative. The conversation with this sponsor should ...read more

1 Reply

Read More Comments

175 views4 Comments

How can you give yourself as much flexibility as possible to decide when to go with best-of-breed capabilities? How do you ensure you're not sacrificing the quality of your security solutions at the altar of vendor consolidation?

Security Strategy & Roadmap Security & GRC Applications & Platforms

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

Understanding your requirements is key. You have all the flexibility you want until you make a decision. Therefore, it's crucial to understand what you're trying to decide on and how you're going to make that ...read more

Read More Comments

163 views3 Comments

How are you measuring success for your vendor consolidation efforts? What metrics best reflect the impacts of consolidation?

Security Strategy & Roadmap Security & GRC Vendor Management

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

We structure our agreements in the statement of work to include strong SLAs and well-defined deliverables over time, from a technology and time perspective. We also clearly define our expectations and deliverables. These ...read more

Read More Comments

161 views3 Comments

What drawbacks have you encountered that leaders should be prepared for as they begin their own consolidation journey?

Vendor Management Security Strategy & Roadmap Security & GRC

Dr Aaron IsaacsDirector, IT Security in Services (non-Government)7 months ago

One potential drawback is the risk of locking oneself into one vendor. While there are benefits to this approach, it also comes with its own set of risks. If you're committed to one set of tools, you're essentially ...read more

Dr Aaron Isaacs

Identified Expertise

Content Dr Aaron is Following

Do you have remote employees on your team?

What is your biggest security concern with a remote workforce?

Do you encourage users to use different passwords between work and personal accounts?

Do you implement a Password Blocklist to prevent users from using common words or phrases in their passwords?

What hurts the most during your job hunt?

Who has the most influence, outside the final decision maker, with regards to choosing technology vendors, data integrations, and API connectivity?

Which SASE vendors are you currently assessing?

Which billing frequency do the largest percentage of your SaaS apps fall into?

What is the biggest barrier to adopting cloud initiatives at your organization?

The shift to Work from Home has created more efficient processes and workflows that will last post-pandemic.

Any low code/no code, free or inexpensive solutions for executive dashboards and reporting? Specifically for Windows Updates and other reporting metrics and SLAs specific to IT Security? WSUS and Tenable reports are insufficient in providing updates and risk reporting granularity.

Current DLP vendor? Pros/Cons. Integration issues, difficulties of implementation, ongoing administration concerns.

Which vendor or tool is your preferred for cloud security? One tool will never suffice, but as we expand to cloud development, we are looking for code to cloud security, SDLC, vulnerability testing, secdevops, etc.

How has your zero trust strategy shifted in the last year, if at all? (And if nothing’s changed, how are you thinking about evolving it in the next year or so?)

What questions should a new security leader ask before starting the journey of vendor consolidation?

What strategies can you use to avoid creating a single point of failure?

Are leaders underestimating the risk of vendor lock-in as they pursue consolidation? How do you strike the right balance to mitigate that risk?

Among all the tools currently used by business units other than IT and security at your organization, have you managed to leverage any for security purposes? Which ones would those be?

When your organization acquires other companies, what impact does this have on your vendor consolidation journey?

How can you convincingly sell the idea of vendor consolidation to skeptical stakeholders and executive leadership?

How can you give yourself as much flexibility as possible to decide when to go with best-of-breed capabilities? How do you ensure you're not sacrificing the quality of your security solutions at the altar of vendor consolidation?

How are you measuring success for your vendor consolidation efforts? What metrics best reflect the impacts of consolidation?

What drawbacks have you encountered that leaders should be prepared for as they begin their own consolidation journey?

Engagement Stats

Content Dr Aaron is Following

Do you have remote employees on your team?

What is your biggest security concern with a remote workforce?

Do you encourage users to use different passwords between work and personal accounts?

Do you implement a Password Blocklist to prevent users from using common words or phrases in their passwords?

What hurts the most during your job hunt?

Who has the most influence, outside the final decision maker, with regards to choosing technology vendors, data integrations, and API connectivity?

Which SASE vendors are you currently assessing?

Which billing frequency do the largest percentage of your SaaS apps fall into?

What is the biggest barrier to adopting cloud initiatives at your organization?

The shift to Work from Home has created more efficient processes and workflows that will last post-pandemic.

Any low code/no code, free or inexpensive solutions for executive dashboards and reporting? Specifically for Windows Updates and other reporting metrics and SLAs specific to IT Security? WSUS and Tenable reports are insufficient in providing updates and risk reporting granularity.

Current DLP vendor? Pros/Cons. Integration issues, difficulties of implementation, ongoing administration concerns.

Which vendor or tool is your preferred for cloud security? One tool will never suffice, but as we expand to cloud development, we are looking for code to cloud security, SDLC, vulnerability testing, secdevops, etc.

How has your zero trust strategy shifted in the last year, if at all? (And if nothing’s changed, how are you thinking about evolving it in the next year or so?)

What questions should a new security leader ask before starting the journey of vendor consolidation?

What strategies can you use to avoid creating a single point of failure?

Are leaders underestimating the risk of vendor lock-in as they pursue consolidation? How do you strike the right balance to mitigate that risk?

Among all the tools currently used by business units other than IT and security at your organization, have you managed to leverage any for security purposes? Which ones would those be?

When your organization acquires other companies, what impact does this have on your vendor consolidation journey?

How can you convincingly sell the idea of vendor consolidation to skeptical stakeholders and executive leadership?

How can you give yourself as much flexibility as possible to decide when to go with best-of-breed capabilities? How do you ensure you're not sacrificing the quality of your security solutions at the altar of vendor consolidation?

How are you measuring success for your vendor consolidation efforts? What metrics best reflect the impacts of consolidation?

What drawbacks have you encountered that leaders should be prepared for as they begin their own consolidation journey?