Home
Vincent Bryan

Ambassador

Vincent Bryan

VP Software Engineering

United StatesVerified Community Ambassador

Identified Expertise

Engineering6
People & Leadership3
Data & Analytics2
Monitoring2
Risk Management2

Engagement Stats

7
Answers Written

595
Profile Views

8
Upvotes Received

Content Vincent is Following

Please join or sign in to view Vincent's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

Which browser do you use at work?

Applications & Platforms

Internet Explorer

Microsoft Edge

Google Chrome

Mozilla Firefox

Safari

Brave

Other

View Results

13.5k views3 Upvotes7 Comments

Is the CISO role underrated in your organization and often overridden by senior technical executives?

People & Leadership Team & Organizational Design

Yes

No

4.8k views2 Upvotes4 Comments

What's the maximum amount of time in a day you're willing to commit to a virtual conference, webinar, etc.?

People & Leadership Culture & Values Productivity Tools+2 more

Zero, I haven't found these formats helpful

30 mins

1 hr

2-3 hrs

4-6 hrs

More, I'll stay online and listen in all-day if it's worth it

View Results

4.3k views3 Upvotes3 Comments

Which is the bigger challenge in cybersecurity?

Engineering Security & GRC Software Development+7 more

Developing safe code

Selecting and implementing tools

1.5k views1 Upvote

Do the benefits of faster software development cycles outweigh the security risks?

Engineering Security & GRC Threat & Vulnerability Management+8 more

Yes

No

3.8k views3 Comments

How are your employees collaborating with third parties? (partners, vendors, contractors, etc.)

Third Party Risk Management (TPRM)Applications & Platforms End-User Services & Collaboration

Providing access to private apps (on premises or in private clouds)

Communicating and sharing with enterprise messaging apps (i.e. Slack and Microsoft Teams)

Share documents or folders via cloud drives

Communicating and sharing with email

Informal communications/Shadow IT (i.e. SMS, WhatsApp, Facebook Messenger, personal email, etc.)

View Results

1.7k views

What are the top three frameworks that are important to have expertise in your supported teams? If another framework or community of practice share in the comments.

Data & Analytics Data Center Applications & Platforms+6 more

PROSCI

ITIL

NIST RISK Management

COBIT

PRINCE2

Project Management Institute (PMI)

Agile

SecDevOps

CMMI

International Standards Organization (ISO)

View Results

4.3k views3 Upvotes1 Comment

What Cloud provider do you think is the most relevant for corporate Enterprise Architectures?

AWS

Azure

GCP

Oracle Cloud

SAP Cloud Platform

Salesforce Cloud

other

View Results

252 views

Which of these data issues do you see as the most significant hurdle to taking full advantage of most AI tools?

AI & Machine Learning

Data silos

Unorganized data

Data quality issues

Unstructured data

None of these – we're ready to go

Something else (comment below)

View Results

589 views3 Comments

What actions is your organization taking to mitigate the risks and manage the impact of the CrowdStrike outage? (Select all that apply)

Crowdstrike Outage 2024 IT Strategy & Roadmap Cloud+3 more

Recovery procedures: Activating recovery procedures and guiding help desk on increased calls

Employee Support: Assisting affected employees with alternative work methods and internal updates (intranet posts, email blasts)

Incident response: Activating in-depth security investigation and response procedures

External support: Seeking support from external consultants, tech vendors, and service providers

Security measures: Implementing additional security controls and notifications to protect our users

External communication: Providing updates to customers and external stakeholders

CrowdStrike communication: Communicating directly with CrowdStrike

Microsoft communication: Communicating directly with Microsoft

Other: Share in comments

View Results

1.4k views16 Upvotes9 Comments

Who develops in the same API for both usage internal and external (OpenAPI) ? We have developed a catalog of nearly 900 APIs for the internal use of our various information systems and wish to develop open APIs accessible to third parties outside our organization. We are questioning whether we should develop our APIs in the same way for both internal and external use (OpenAPI), or if it is preferable to differentiate the APIs we develop with a separate design for internal and external use (mainly for security reasons and regarding the range of data we can expose inside vs outside our organization). Has anyone already faced this question?

Vincent BryanVP Software Engineering in Insurance (except health)13 days ago

We have exposed 200+ APIs externally to our users out of 300+ internal APIs. For internal service to service auth, we use auth based tokens and for external APIs, we refresh the token via another api every 3 hours and use ...read more

1

Read More Comments

457 views2 Upvotes3 Comments

I am trying to define a RACI and coordinate with my colleagues the roles and responsibilities for Application Engineering vs Application Development. Can anyone share how they have done this?

Applications & Platforms Engineering Infrastructure

Vincent BryanVP Software Engineering in Insurance (except health)3 months ago

Something I have always recommended business groups do is create group charters for who they are, what they do, and how they provide the support they do to the business. Then understanding which processes in the SDLC they ...read more

Read More Comments

2.3k views3 Comments

How do you identify and nurture potential leaders within your software engineering team? What signs do you look for, and how do you encourage your staff to develop into leaders?

People & Leadership Engineering

Vincent BryanVP Software Engineering in Insurance (except health)3 months ago

We use a variety of methods to do this. A few of the more succesful ones are:
1. Leadership Development program. Managers select high potential candidates who are invited to participate in the program. It lasts for 1 year ...read more

3

Read More Comments

526 views1 Upvote4 Comments

What are typical reasons why leaders from other teams may have doubts or mistrust towards the data and analytics function, and what has been your approach to overcome lack of trust in the data and analytics function?

Data & Analytics People & Leadership Process Management

Vincent BryanVP Software Engineering in Insurance (except health)4 months ago

Poor data quality is a popular and good reason, especially if they've had prior bad experiences with bad data (or even bad interpretations of good data). Additionally, top reasons include lack of transparency / the data's ...read more

2 Replies

Read More Comments

414 views8 Comments

How are others deploying data/development tools (e.g. VS Code, DBT, Python + Packages) to their data engineers, analyst users? How are you mitigating concerns from security teams around ability for these programs to be a security risk (running scripts/nefarious code)?

Data & Analytics End-User Devices Software Packaging & Distribution+9 more

Vincent BryanVP Software Engineering in Insurance (except health)3 months ago

We are using cyber security policies and scanning tools. With respect to policies - we are using documented policies to start and then working to embed these policies into our cicd pipelines. This is pretty challenging at ...read more

1

197 views1 Comment

Has anyone tried to use Azure B2C for their external users through their own homegrown portal? We are running into issues trying to use OIDC as the protocol to secure it and have SSO work properly. OIDC's security model is to restrict 3rd party initiated logins so once we have users login to our portal, and pass the tokens from our portal to another app, we get an issuer mismatch error from our apps and can't create an SSO login experience for our users.

Cloud Infrastructure Peer Insights+1 more

Vincent BryanVP Software Engineering in Insurance (except health)3 months ago

This article uses a sample JavaScript single-page application (SPA) to illustrate how to add Azure Active Directory B2C (Azure AD B2C) authentication to your SPAs. https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-authentication-sample-spa-app

Also ...read more

1

Read More Comments

1.5k views1 Upvote2 Comments

What is your best advice for software developers and engineers who are eager to transition into a leadership position?

Vincent BryanVP Software Engineering in Insurance (except health)4 months ago

1. Define your “why do you want to move in a formal leadership role”
2. It’s all about people, so better learn how to deal with people.
3. Better take formal training before taking on the role
4. I would highly recommend ...read more

Read More Comments

617 views1 Upvote5 Comments