Ambassador

Xavier Thomas

Network Architect / Cyber Forensic Detective

United StatesVerified Community Ambassador

Identified Expertise

Content Xavier is Following

Please join or sign in to view Xavier's full profile

By joining the Peer Community, you'll get:

Peer Discussions and Polls
One-Minute Insights
Connect with like-minded individuals

What is the best Customer Data Platform (CDP) Software?

Data & Analytics Business Intelligence Vendor/Product Recommendation+3 more

Segment

Bloomreach

Tealium AudienceStream CDP

Salesforce CDP

Adobe Real time CDP

Other (please comment below)

View Results

1.8k views2 Upvotes1 Comment

How often does procurement include cyber risk assessment requirements in their engagement requests?

Third Party Risk Management (TPRM)Security Strategy & Roadmap Governance, Risk & Compliance

Always

Often

Sometimes

Rarely

Never

Not sure

View Results

3k views1 Comment

How much longer do you see yourself remaining with your current employer?

< 6 months

Less than a year

12 - 24 months

More than 2 year but less than 5 year

More than 5 year but less than 7 years

More than 10 years

Not decided yet

Never

View Results

1.4k views1 Upvote

How can you build a brand for the security function that helps to reinforce secure behavior across the business?

People & Leadership Security Strategy & Roadmap Awareness & Training

Xavier ThomasNetwork Architect / Cyber Forensic Detective2 months ago

Establishing credibility is key to building a brand, whether it's internal or external. This credibility is often derived from being a subject matter expert. It's disappointing to see people in trusted positions with mediocre ...read more

Read More Comments

190 views4 Comments

What advice can you offer security leaders currently trying to win executive support to create a secure behavior and culture program? How should they frame the business case for an SBCP?

Awareness & Training Security Strategy & Roadmap People & Leadership

Xavier ThomasNetwork Architect / Cyber Forensic Detective2 months ago

Security awareness in most org is seen as a check in the box compliance requirement and a bit as nice to have. For me, security is part of value system, much like integrity is or focus on workforce engagement might be. And ...read more

Read More Comments

299 views5 Comments

How have you approached integrating humor or storytelling into security awareness materials? What do you consider the biggest do’s and don’ts?

Awareness & Training Security Strategy & Roadmap People & Leadership

Xavier ThomasNetwork Architect / Cyber Forensic Detective2 months ago

Humor is mandatory for security awareness training. It's a scary subject, and if you present it as a hard, horrible thing, people will shy away from it. When I tell people that I work in cybersecurity or privacy law, they ...read more

Read More Comments

240 views3 Comments

What’s your personal opinion on phishing tests — should cyber professionals rethink this as a method for security awareness training, or is it a necessary practice?

Awareness & Training Security Strategy & Roadmap Testing+1 more

Xavier ThomasNetwork Architect / Cyber Forensic Detective2 months ago

I believe that phishing tests are absolutely a necessary practice. Unfortunately, in today's environment, employees are often the weakest link in securing an organization. We need to ensure they are educated on the critical ...read more

Read More Comments

428 views10 Comments

What do you consider key success factors for an effective security champion program?

Security & GRC Security Strategy & Roadmap People & Leadership

Xavier ThomasNetwork Architect / Cyber Forensic Detective2 months ago

A key success factor is ensuring that everyone in the organization understands that security affects everyone, not just the IT department or the CIO or the CISO. It's a team effort, much like a game of flag football. The ...read more

2 Replies

Read More Comments

129 views4 Comments

Do you think rewarding or recognizing individuals for secure behavior is an effective strategy? How is this tactic applied at your organization?

Awareness & Training People & Leadership Security Strategy & Roadmap

Xavier ThomasNetwork Architect / Cyber Forensic Detective2 months ago

Yes, praising or acknowledging people for their safe behavior is a successful method. At my previous and current workplaces, we established a point system that allows employees to get financial incentives based on the number ...read more

Read More Comments

476 views7 Comments

Engagement Stats

6
Answers Written

418
Profile Views

1
Upvotes Received