March 2023 Summaries

In a conversation on the Future of Security Operations podcast, Thomas interviews Ryan Noon, founder and CEO of Material Security, exploring his journey from a startup enthusiast to a cybersecurity thought leader. Noon, an expert in cloud security with a background in computer science, discusses his entrepreneurial ventures, including the founding of Parastructure and its acquisition by Dropbox, and how these experiences shaped his approach to cybersecurity. He highlights the significance of email security, the impact of Russian interference in the 2016 U.S. election on his understanding of cybersecurity, and the importance of product management in building a successful company. Noon also shares insights on navigating economic challenges, the importance of avoiding fear-driven tactics in cybersecurity, and emphasizes the need to leverage existing technology for more efficient security operations.

In a podcast episode featuring Diana Kelley, renowned cybersecurity expert and Chief Security Officer at Cybrize, discussions revolve around her extensive career in cybersecurity, the evolving threat landscape, and the importance of integrating compliance into security programs. Kelley, who has held prominent roles at Microsoft, IBM, and KPMG, emphasizes the need for executives to move beyond viewing compliance as a mere checkbox exercise and instead use it to enhance security strategies. She addresses the cybersecurity skills gap by advocating for diversity, equity, inclusion, and allyship in hiring practices and highlights the necessity of properly sizing security teams to prevent burnout. Kelley also shares insights on the future of Security Operations Centers (SOCs), predicting a more distributed approach and the increasing role of AI and automation in supporting, rather than replacing, human efforts. The conversation also touches upon balancing security policies with organizational pressures and the significance of communicating the value of security teams.

The text outlines several updates and features in Tines, including the ability to integrate workflows more widely by enabling the response data switch, allowing HTTP requests to receive event data from story runs. It introduces a new add-on for setting up branded domains, which can enhance brand recognition and trust, though it requires a dedicated cloud tenant. Additionally, new functions have been added to formulas, and general usability improvements have been made, such as enhanced search capabilities, the ability to open stories in new tabs, and command bar enhancements for more efficient navigation.

Recent updates to the platform include the ability to configure Story-level monitoring alongside individual Action monitoring, and the introduction of just-in-time user provisioning for automatic access to the Tines tenant. Expanded page configurations now support enhanced flexibility with new features such as themes, drag-and-drop elements, adjustable page widths, transition-loading messages, and custom field validation. The platform's formulas have been updated with new functions like GZIP and GUNZIP, enhanced logical operators, and improved handling of array and object literals. Additionally, a new command bar feature has been introduced to streamline access to the search bar and quick actions using keyboard shortcuts. Users are encouraged to explore these changes and provide feedback through the Slack community.

Rosie Halpin, a seasoned sales engineer at Tines, is dedicated to showcasing the transformative potential of automation through the company's no-code platform, which she tailors to meet the unique challenges faced by security teams. Her role involves engaging with prospective customers to demonstrate how Tines can optimize their operations, and she takes pride in witnessing clients' realization of the platform's extensive capabilities. With a background in risk and security consulting, Rosie leverages her expertise to craft solutions that resonate with clients, often creating guides like the one on automating ChatOps in Slack. She emphasizes the importance of building relationships within the supportive Tines community and appreciates the rapid pace of innovation at the company. Rosie encourages feedback from users to continually refine the platform, underscoring Tines' commitment to integrating user input into its development process.

Achieving SOC 2 compliance, which ensures third-party service providers handle customer data securely, can be a labor-intensive endeavor. Tines, a no-code automation platform, successfully transformed their SOC 2 compliance process by reducing manual efforts and time through automation. By integrating Tines with Drata, they automated auditing and evidence collection for 110 compliance controls, saving 250 human hours and completing the process in four months. This included automating the evidence of production code changes, which saved an additional 150 hours, allowing engineers to focus on their regular tasks without disruption. The experience demonstrated that SOC 2 compliance processes can be streamlined significantly, offering a model for other organizations seeking efficient compliance solutions.