Security Experts:

WRITE FOR US
Mark Hatton's picture

Mark Hatton

Contact Mark Hatton

Mark Hatton is president and CEO of CORE Security. Prior to joining CORE, Hatton was president of North American operations for Sophos. He has held senior roles with companies ranging from venture capital-backed, early-stage software vendors to a Fortune 500 information technology services and distribution organization. Hatton holds an MBA from Boston University, Massachusetts and a BA Communication from Westfield State College, Massachusetts.

Recent articles by Mark Hatton

  • If Passwords Received as Much Attention as PSI We'd All Be More Secure
    The country has become obsessed with a couple of pounds per square inch (PSI) in a football, yet seems to have no issue ignoring simple steps that could greatly improve our overall cyber security.
  • A Key Step to Improving Network Security: Challenge the Status Quo
    Unfortunately, when it comes to security, what you’ve accomplished means very little. It’s all about where the vulnerabilities still exist.
  • Sometimes, Perception is Just as Important as Reality
    In the world of security, there is often a significant difference between perceived reality and what is actually happening, and the public’s perception of security within your organization can be just as important as reality.
  • Cyber Security Coming to a Screen Near You
    What are we to make of Hollywood’s latest obsession with all things cyber? Between the recently released movie, Blackhat, and the forthcoming CSI CYBER TV series, the powers that be have clearly decided this subject is exciting enough to attract an audience.
  • In Security, Prioritization should be a Priority
    Without the ability to prioritize in certain situations, you may end up waiting weeks to apply the most important patch. Think of your corporate network like your home. There are probably lots of items on your honey do list, but they can’t all be completed today.
  • America's Do It Yourself Warehouse Shines a Light on the Problem of Do It Yourself Security
    Software and hardware alone are not enough to manage a massive enterprise security program. You need security professionals and experienced leaders who can keep the team (and the tools) operating effectively.
  • Nothing Supports Winning Like Continuity: What Security Can Learn from the NFL
    it’s hard to build continuity under inconsistent leadership. It’s also really hard to beat the hackers when the person responsible for keeping them at bay has less job security than an NFL coach with a losing record.
  • Halfway There - Where Does Security Stand?
    You need to identify your security shortcomings before someone else does. Simulate attacks and tests to associate known vulnerabilities, previous attack patterns, and security/network data to identify potential attack paths to your company’s most important data.
  • Sooner or Later You'll Get Hacked and Hire a CISO
    Having a CISO not only solves the diffusion of responsibility problem by putting one person in charge, it also helps to transform the security culture in your organization.
  • Will Security Match Up to The World Cup's Cyber Threats?
    So what does the World Cup have to do with cyber security? A great deal actually. Anytime there is a large-scale global event, there is a sharp spike in the number of cyber scams that are unleashed.
  • A Message to Graduates – We Want You!
    Are we doing enough to ensure that we are cultivating the next generation of cyber professionals? Do we invest enough in education programs that so that students go on to institutions of higher learning with a goal of becoming a cybersecurity expert?
  • Are We Ready to Take These Breaches More Seriously Now?
    The fall of a high-profile CEO due to security concerns makes me envision a scenario where security is now given a more prominent role on the executive team, with more emphasis placed on avoiding the breach in the first place.
  • In Cybersecurity, is No News Really Good News?
    The fact that you aren’t seeing or hearing about potential threats to the organization, or alarms aren’t being raised by the security team, shouldn’t make you feel better as an executive.
  • Security is a Marathon
    Security really is a marathon and there are no days off. Sacrifices are needed and tough decisions are required. The motto of our country’s most elite fighting force, the US Navy SEALs, is The Only Easy Day Was Yesterday.
  • Five Things I'm Hoping For in the Security Industry
    I am painfully aware that in business and in security, hope is not a plan. However, that doesn’t mean we can’t dream a bit about the best case scenario. In the spirit of the season, here are five things I’m hoping for in the security industry this year.
  • Healthcare Security: Where's the Hype for HIPAA?
    The oversight for the protection of healthcare information is only getting tighter, and it is incumbent upon the security teams to ensure healthcare professionals have all the tools necessary to improve patient outcomes, while we worry about keeping the bad guys away.
  • A New Approach, A New Era for Security
    During the RSA Conference we heard a lot about the changing landscape of threats and how attackers are becoming more sophisticated and better funded every day. So naturally the debate ensued around whether keeping pace and ultimately closing the gap is a question of technology, spend or approach.
  • Five Considerations for Being Proactive Without Becoming a Problem Yourself
    Here are five things I recommend security pros keep in mind when navigating the line between tight security and keeping the organization running at peak proficiency.
  • Can a Couple of Inches of Snow Change the Way We View Security?
    Predictive security narrows the scope considerably and helps IT and security pros zero-in on the most likely vulnerabilities and areas most-at-risk due to the sensitive nature of the data they hold.
  • Will Security be Sochi's Most Watched Event?
    One of my concerns heading into these Olympic Games is that the public has become somewhat desensitized to cyber-attacks and we may not have the same level of vigilance against cyber threats as we should.
  • As Security a Professional, What Will You Be Focused on in 2014?
    Complacency is never a good thing, but in security it can have devastating effects. While it’s good to acknowledge progress, that should never stand in the way of staying ahead of the next potential threat.
  • The "Grinches" Who Stole Security
    If you are a CISO or director of security you already know that not everybody within your organization values security as much as you do, or perhaps as much as they should.
  • What Would Nostradamus Have Said About Cyber Security in 2014?
    If Nostradamus had envisioned our networked world of 2014 and had written predictions about the security challenges that existed, I’d expect them to look something like this...
  • Think Like an Attacker for Better Defensive Capabilities
    The best way to anticipate a move by an adversary is to put yourself in their position and ask, what would I do in the same situation? Studying the ways in which you would attack a given situation provides a strategic advantage when planning your defense.
  • Cyber Threats vs. Infrastructure: What's the Score?
    While we haven’t yet suffered what could be considered a major infrastructure attack, the reality is that the number of attacks is on the rise. Can our defense respond to the challenge?