Ambassador

Tomas Honzak

VP, CISO at Vendavo

Czech RepublicVerified Community Ambassador

Identified Expertise

Content Tomas is Following

Please join or sign in to view Tomas's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

Sometimes

View Results

111.2k views126 Upvotes59 Comments

Which of the following best describes your biggest challenge with object storage?

Storage

Performance

High cost

Rate of Data Growth

Other (none of the above)

View Results

8.8k views1 Upvote3 Comments

What are your biggest barriers in achieving your IT goals?

Strategy & Architecture

Skills

Funding

C-Suite support

Technology stack

Culture

Other

View Results

5.8k views3 Upvotes3 Comments

What is more important to your IT organization?

Strategy & Architecture

Run day-to-day IT

Deliver innovation

7.9k views2 Upvotes9 Comments

Which channel do you respond best to?

Peer Insights

Text

Slack

Facebook Messenger

Browser Notifications

View Results

8.1k views6 Upvotes5 Comments

Do recent Facebook data scandals shake your confidence in Workplace by Facebook?

End-User Services & Collaboration Applications & Platforms

Yes

Neutral

What scandals?

View Results

4.7k views5 Upvotes2 Comments

Do you believe new technologies would offer a bigger return on investment than new employees at your company?

Disruptive & Emerging Technologies Talent Management & Performance

Yes

12.7k views9 Upvotes19 Comments

In recruiting cybersecurity talent, which of the following is hardest to recruit?

Talent Management & Performance

Entry-level talent

Mid-level management

Senior Talent

Specialists

View Results

3.6k views3 Upvotes2 Comments

How many direct reports away from the CEO is the senior-most security executive?

Security & GRC Team & Organizational Design

Direct report

View Results

12.6k views3 Upvotes6 Comments

What is the vulnerability remediation timeline you have adopted for CVSS >= 7.0 vulnerabilities which are only exposed to your Intranet users (not Internet)?

Security & GRC Threat & Vulnerability Management

Between 6-12 months

Between 3-6 months

Between 2-3 months

Between 1-2 months

Between 2 weeks to 1 month

Between 1-2 weeks

Between 0-1 week

View Results

5.1k views3 Upvotes3 Comments

Nowadays, many SaaS tools offer SSO integration as a premium feature, sometimes effectively doubling the price-per-user. What is the right way to find balance between when to invest and leverage SSO and when to keep the costs lower and handle the provisioning and de-provisioning manually?

Security & GRC Disruptive & Emerging Technologies Financial Management

Tomas HonzakVP, CISO at Vendavo in Software5 years ago

It depends on what the original authentication method is. We require multi factor PIV authentication and can only use FedRAMP approved cloud providers which have been vetted to meet NIST requirements so I wouldn’t have an ...read more

737 views1 Comment

Nowadays, many SaaS tools offer SSO integration as a premium feature, sometimes effectively doubling the price-per-user. What is the right way to find balance between when to invest and leverage SSO and when to keep the costs lower and handle the provisioning and deprovisioning manually?

Strategy & Architecture Security & GRC Financial Management+1 more

Tomas HonzakVP, CISO at Vendavo in Software5 years ago

Sorry; let’s get some more information to help answer this better. What do you use for identity management in the enterprise? Is your environment comprised of mostly SaaS applications or do you have a mix of on prem/custom ...read more

1.2k views1 Upvote1 Comment

How do you enhance network security?

Tomas HonzakVP, CISO at Vendavo in Softwarea year ago

Hard to give a specific answer without having context, but let me try anyways:
- Create network diagram and review the flow of data through it. Pay attention to understand their sensitivity.
- Review the segmentation ...read more

2k views1 Comment

Interested in hearing how folks define “cyber resilience” for their current org – is it mainly about minimizing risk/potential losses for you, minimizing MTTR, or something else altogether?

Resilience Security Strategy & Roadmap Security & GRC

Tomas HonzakVP, CISO at Vendavo in Softwarea year ago

From an high level perspective, I look at cyber resilience from the lens of three lines of defense, management controls, risk management, and internal audit. Management controls must include the monitoring process (cybersecurity ...read more

Read More Comments

3.9k views27 Upvotes16 Comments

Has anyone has developed a ChatGPT / use of AI policy? Or do you reference existing P&Ps?

Security & GRC

Tomas HonzakVP, CISO at Vendavo in Softwarea year ago

Our ChatGPT and AI Policy encompasses a set of guidelines and principles that govern the development, deployment, and ongoing usage of our AI technologies. These guidelines are based on established best practices, industry ...read more

Read More Comments

13.5k views33 Upvotes16 Comments

Where does the concept of Defense in Depth play into your org’s cybersecurity strategy? What are you doing practically to integrate that?

Security & GRC Security Strategy & Roadmap Risk Management+1 more

Tomas HonzakVP, CISO at Vendavo in Softwarea year ago

This question requires a long explanation, but in a nutshell, implemented in the Risk Management Framework (NIST RMF). It is a layered protection in every step of the RMF.

Read More Comments

5.5k views4 Upvotes14 Comments

Is it a good practice to allow email addresses as usernames for login to your website? What are the pros and cons and what are factors that might go into making a decision? The ISO/IEC 27001 provides some guidance .

Security & GRC Strategy & Architecture Applications & Platforms

Tomas HonzakVP, CISO at Vendavo in Software2 years ago

The PROs:
- It is easy and straightforward
- The user does not need to track their usernames for different sites
- No-one would "steal your favorite username"
- "Verified identity" (to the extent ...read more

701 views1 Comment