Cyber Security Failures Alleged in Mudge Whistleblower Compliant

Compliance into the Weeds is the only weekly podcast which takes a deep dive into a compliance related topic, literally going into the weeds to more fully explore a subject. In this episode, we mine the whistleblower allegations by Peiter Zatko, AKA “Mudge” made against Twitter for lessons for the cyber-security professional and wide compliance discipline.  Highlights and questions posed include: ·      The allegations made by Mudge.  ·      Why does an organization need a CISO (or CCO or CECO)?  ·      How did Twitter get hacked, its employees duped and its controls by-passed? ·      What is pedestrian yet telling in this saga? ·      Why data mapping is mandatory if not critical? ·      Where were the external auditors? ·      Is there a Caremark claim here? Resources Matt in Radical Compliance Learn more about your ad choices. Visit megaphone.fm/adchoices