Strategic Thought Leadership with
Cybersecurity Insights

Matthew Rosenquist CEO Cybersecurity Insights

“Cybersecurity must pursue an optimal balance between acceptable risk, costs, and friction to the organization!”

Stay Informed and Ahead of Digital Threats with Cybersecurity Insights

US Securities and Exchange Commission case against SolarWinds and its CISO

Featured
10 Cybersecurity Predictions for 2025
10 Cybersecurity Predictions for 2025

The cybersecurity landscape is poised for transformation in 2025. The rapid evolution of technology, coupled with the increasing sophistication of threat actors, presents a future that is both exciting and daunting. In this era of digital interconnectedness, understanding the potential cybersecurity challenges that lie ahead is a crucial requirement to protect it from rapidly evolving threats.

The following predictions and anti-predictions offer a glimpse into the cybersecurity realities we may face in 2025.

2024 Cybersecurity Predictions and Key Risks
2024 Cybersecurity Predictions and Key Risks

The Unseen Threats: Anticipating Cybersecurity Risks in 2024. The challenges are growing towards a breaking point!

Let’s explore the complex predictions for 2024 and beyond!

Featured
InCyber Forum
Oct 30
InCyber Forum

I will be a panelist on the PROTECT YOUR DATA, THRIVE IN BUSINESS: STRIKE A BALANCE panel!

Mindfluence CISO/Executive Leadership Forum
Oct 24
Mindfluence CISO/Executive Leadership Forum

Keynote - Cybersecurity at a Crossroads: From Cost Center to Competitive Edge

ManageEngine User Conference - West Coast 2024
Sep 20
ManageEngine User Conference - West Coast 2024

I’m excited to be speaking at the ManageEngine User Conference in San Diego CA on Sept 19th-20th.

I will be presenting a talk on the top Emerging Threats to Cybersecurity!

SECURITYbreak live-stream podcast
Sep 18
SECURITYbreak live-stream podcast

I am looking forward to a chatting with Giorgio Perticone on the SECURITYbreak live podcast, to discuss the darker side of cybercrime!

 

Come join the live stream on Sept 18th at 10am Pacific time.

https://www.youtube.com/watch?v=nKyET5PsPCM

ISACA GRC 2024 Sacramento CA Conference
Sep 10
ISACA GRC 2024 Sacramento CA Conference

Reignite 2024: Harmonizing People, Process, and Technology for Cybersecurity

ZeroTrust Meet & Expo 2024
Aug 26
ZeroTrust Meet & Expo 2024

Speaking to how emerging cybersecurity threats are increasing the risks and the importance of Zero Trust for security.

ISACA GRC 2024 Conference
Aug 11
ISACA GRC 2024 Conference

I will be at the ISACA Governance Risk and Management conference. Mercury Risk and Compliance will have a booth and will be conducting a workshop on cybersecurity risk metrics that protect business investments and value!

Industry perspectives from the top minds in cybersecurity about the most relevant issues

Speaking Engagements

Featured
Hackers vs. Heroes: Cybersecurity Crisis Response Leadership Best Practices and Worst Fails
Hackers vs. Heroes: Cybersecurity Crisis Response Leadership Best Practices and Worst Fails

The Cybersecurity Vault - episode #30, with guest Lisa Forte . Effectively responding to cybersecurity crisis events is crucial, yet many organizations lack a mature capability.

I speak with Lisa Forte, a legend when it comes to helping organizations prepare for handling cybersecurity crisis events, who shares her rich insights and recommendations.

The Cybersecurity Vault - episode #30, with guest Lisa Forte . Effectively responding to cybersecurity crisis events is crucial, yet many organizations lack a mature capability.

I speak with Lisa Forte, a legend when it comes to helping organizations prepare for handling cybersecurity crisis events, who shares her rich insights and recommendations.

Lisa’s LinkedIn profile: https://www.linkedin.com/in/lisa-forte/

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Visit Cybersecurity Insights at https://www.cybersecurityinsights.us

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

Ransomware: To Pay or Not to Pay?
Ransomware: To Pay or Not to Pay?

In this episode, we discuss one of the most divisive and contentious topics in cybersecurity - should victims of ransomware be allowed to pay the cybercriminals?

The Cybersecurity Vault - episode 32, with guest Ian Thornton Trump. In this episode, we discuss one of the most divisive and contentious topics in cybersecurity - should victims of ransomware be allowed to pay the cybercriminals?

With the continuing rise of digital extortion, such as ransomware, the world has realized that typical security practices cannot keep pace and the impacts are threatening the critical infrastructure sector. That has significant ramifications to the security and safety of entire nations.

The idea of criminalizing digital extortion payments, to choke the money going to cybercriminals and thereby deter them, is a contentious idea that has the community polarized.

I welcome back Ian Thorton Trump, the CISO at Cyjax Limited and the CTO at Octopi Managed Services to constructively discuss a path forward to address the growing threat.

Ian’s LinkedIn profile: https://www.linkedin.com/in/ian-thornton-trump-cd-77473a26/

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Visit Cybersecurity Insights at https://www.cybersecurityinsights.us

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

Guardians of Academia: Battling Cyber Threats in Higher Education
Guardians of Academia: Battling Cyber Threats in Higher Education

The Cybersecurity Vault - episode #31, with guest Donna Kidwell. Donna Kidwell, CISO of Arizona State University, is one of the best and brightest in our community! I am continually amazed at her insights, strategic focus, and ability to creatively tackle some of the biggest problems in cybersecurity.

The Cybersecurity Vault - episode #31, with guest Donna Kidwell. Donna Kidwell, CISO of Arizona State University, is one of the best and brightest in our community! I am continually amazed at her insights, strategic focus, and ability to creatively tackle some of the biggest problems in cybersecurity.

Today, we talked about the incredible challenges and forward-thinking that her team is driving at ASU and across partnerships around the globe.

Afghan women and their ARISTA internships - so incredibly proud of them - their story is here! https://tech.asu.edu/features/arista-upksilling-cohort-2023

Donna’s LinkedIn profile: https://www.linkedin.com/in/dkidwell

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist

Visit Cybersecurity Insights at https://www.cybersecurityinsights.us

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

Debating the SEC Charges Against SolarWinds and their CISO
Debating the SEC Charges Against SolarWinds and their CISO

The cybersecurity community is in an uproar over the recently announced SEC case against SolarWinds and their CISO. I talk with Ira Winkler, a longtime respected veteran of the industry, to debate the various issues of this SEC fraud and Internal Control Failures.

The cybersecurity community is in an uproar over the recently announced SEC case against SolarWinds and their CISO. I talk with Ira Winkler, a longtime respected veteran of the industry, to debate the various issues of this SEC fraud and Internal Control Failures.

SEC press release: https://www.sec.gov/news/press-release/2023-227

SEC Compliant (.pdf) https://www.sec.gov/files/litigation/complaints/2023/comp-pr2023-227.pdf

Ira Winkler’s LinkedIn Profile: https://www.linkedin.com/in/irawinkler/

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

SEC Case Against SolarWinds with Ed Amoroso
SEC Case Against SolarWinds with Ed Amoroso

The SEC case against SolarWinds and their CISO continues to reverberate across the cybersecurity community. I talk with Edward Amoroso, the Founder and CEO of TAG Infosphere, to discuss different aspects of the case and recent SEC requirements for disclosure of material incidents.

The SEC case against SolarWinds and their CISO continues to reverberate across the cybersecurity community. I talk with Edward Amoroso, the Founder and CEO of TAG Infosphere, to discuss different aspects of the case and recent SEC requirements for disclosure of material incidents.

Ed LinkedIn profile: https://www.linkedin.com/in/edward-amoroso/

TAG Infosphere website: https://tag-infosphere.com/

SEC official announcement: https://www.sec.gov/news/press-release/2023-227

SEC Complaint (.pdf) https://www.sec.gov/files/litigation/complaints/2023/comp-pr2023-227.pdf

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

Blaming Customers for Cybersecurity Breaches
Blaming Customers for Cybersecurity Breaches

Some companies, after being breached are attempting to shift the 'narrative of blame' away from themselves and sometimes towards their customers! I talk with Christine Bejerasco, CISO of WithSecure, and discuss how this is coming about and what both companies and consumers should be doing to protect sensitive data.

Some companies, after being breached are attempting to shift the 'narrative of blame' away from themselves and sometimes towards their customers! I talk with Christine Bejerasco, CISO of WithSecure, and discuss how this is coming about and what both companies and consumers should be doing to protect sensitive data.

Christine's LinkedIn profile: https://www.linkedin.com/in/christinebejerasco/

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Visit Cybersecurity Insights at https://www.cybersecurityinsights.us

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

Now is the Time to Improve Cybersecurity Metrics with Rick Howard
Now is the Time to Improve Cybersecurity Metrics with Rick Howard

We are doing cybersecurity metrics wrong! There are better ways and my guest Rick Howard, the CSO at N2K and longtime cybersecurity metrics expert, provides insights into how metrics can support cybersecurity programs and decisions. This is a timely topic as there are more pressures on CISOs, from new regulations, emerging standards, higher Board expectations, and SEC enforcements, that are increasing the need for better cybersecurity metrics.

We are doing cybersecurity metrics wrong! There are better ways and my guest Rick Howard, the CSO at N2K and longtime cybersecurity metrics expert, provides insights into how metrics can support cybersecurity programs and decisions. This is a timely topic as there are more pressures on CISOs, from new regulations, emerging standards, higher Board expectations, and SEC enforcements, that are increasing the need for better cybersecurity metrics.

Rick and I probably had too much fun in this podcast, arguing and bantering. He brings a wealth of knowledge and experience to the table. I look forward to our next chat!

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

Follow Rick on LinkedIn: https://www.linkedin.com/in/rickhoward/

Be sure to check out his books, course, podcasts, and the booklist from the Cybersecurity Canon Project:

Book: Cybersecurity First Principles: A Reboot of Strategy and Tactics

https://www.amazon.com/Cybersecurity-First-Principles-Strategy-Tactics/dp/1394173083

First Principles Free Course

https://www.n2k.com/cybersecurity-first-principles-course

The Cybersecurity Canon Project

http://cybersecuritycanon.com/bookreviews

Rick Howard Podcast on The CyberWire - CSO Perspectives

https://thecyberwire.com/podcasts/cso-perspectives-public

Cyberwire Network - The Cyberwire’s Network of Security Podcasts

https://thecyberwire.com/podcasts

Increasing Relevance for the Next Evolution of Cybersecurity Metrics with Gavin Ground
Increasing Relevance for the Next Evolution of Cybersecurity Metrics with Gavin Ground

Cybersecurity metrics as it relates to risk management, regulations, resource optimization, board communications, and grandmothers! We cover it all! Another great conversation with Gavin Grounds, longtime industry veteran and thought-leader in the enterprise cybersecurity metrics space. If you think metrics are important or you need better metrics, be sure to listen in!

Cybersecurity metrics as it relates to risk management, regulations, resource optimization, board communications, and grandmothers! We cover it all! Another great conversation with Gavin Grounds, longtime industry veteran and thought-leader in the enterprise cybersecurity metrics space. If you think metrics are important or you need better metrics, be sure to listen in!

Gavin’s LinkedIn Profile: https://www.linkedin.com/in/gavingrounds/

Mercury Risk and Compliance: https://mercuryrisk.com/

Follow Matthew on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/

Subscribe to the Cybersecurity Insights channel: https://www.youtube.com/CybersecurityInsights

Compelling Thought-Leadership

“Value is the Blind Spot of Cybersecurity” Keynote at the SPHERE conference in Helsinki Finland.

Cybersecurity organizations have a big problem with communicating value to justify investment in security. Matthew explains the problem and how the industry must adapt to deliver better value!

Welcome to the Tech Education Series, where current students and life-long learners ask questions to industry professionals in search of meaningful career insights.

Cybersecurity leadership and insights are not out of reach for Small & Medium Businesses (SMBs).

CISO services tailored for SMBs, providing affordable strategic advice to protect the organization in alignment with business goals.

SERVICES

Hire a world class speaker for innovative keynotes, panels, fireside chats, session moderations, and expert interviews.

Matthew is available for media interviews, podcasts, webinars, and article citations on pressing issues.

Cybersecurity is easy to conceptualize but difficult to master. It must be a recognized and tangible value for the business.

Benefit from an expert CISO and cybersecurity strategist, as an advisor to evaluate, mentor, and help identify cybersecurity risks and potential business opportunities.

Partners, Clients, & Advisory Boards