Member Contribution • Weekly CISO Podcast Pick
This Week’s Pick by David Cross (CISO, Atlassian)
Series curated by the CISO Platform community. Spotlighting practical listens for security leaders and their teams.
Why this episode matters
|
Copy-paste takeaways for your team
|
Standout ideas discussed
- SaaS sprawl & identity blind spots: “Salesforce issue” → tokens/support data chaining into other systems.
- Hard keys over weak MFA: mandate hardware-backed second factors for admin/prod access.
- Passkeys UX caution: pilot first; avoid confusing multi-provider prompts.
- AI in practice: treat AI as “human problems at hyperspeed.” Visibility first; then guardrails.
- Org resilience: practice business-down scenarios; security keeps operations moving, not just data safe.
Try this in the next 7 days
- Session hygiene sprint: pick 2 critical SaaS → cut session TTL, add device checks, re-auth on privilege use.
- Support token hunt: scan last 90 days of tickets for secrets/tokens; revoke and block future paste-ins.
- Tabletop “operations offline”: 60-min drill with IT/Finance/Ops: how do we operate if core SaaS is down?
About David Cross
David is CISO at Atlassian and a long-time community member at CISO Platform. His weekly picks are short-listed for practical signal—conversations that sharpen how we lead, not just what we deploy.
Want your pick featured next?We’re building a rotating slate of member recommendations from USA, Middle East, and India. If you’re a CISO or security leader, submit a link and 3 bullets on why it matters. |
How we choose
|
Comments