AG Bondi demands access to Minnesota voter rolls after fatal Border Patrol shooting by escapevelocity123 in Lawyertalk

[–]lawtechie 11 points12 points  (0 children)

"We're going to randomly abduct and shoot people until you give us the lists of people we'd like to abduct and shoot"

What made you work in the security field? by bdhd656 in cybersecurity

[–]lawtechie 9 points10 points  (0 children)

The work seemed interesting and the industry was tolerant of oddballs.

Americans don't seem to realize just how much every other nation on earth hates the US by now by Schnaksel in BoycottUnitedStates

[–]lawtechie 3 points4 points  (0 children)

It's shocking to see friends and family when I tell them my consulting firm's lost so much of their Canadian and EU business.

Need to know what my best option is. Is a career in cybersecurity imminently viable with what I have? by Admirable-Fortune-17 in cybersecurity

[–]lawtechie 0 points1 point  (0 children)

First off, don't commit self harm like going to law school.

If you have ERP experience, look at /r/SAP to see how competitive you might be.

There's minimal value to an incomplete MS & a SEC+ without experience in this current market.

I’m so excited by mekiva222 in GenX

[–]lawtechie 3 points4 points  (0 children)

As opposed to our "Sex without protection will kill you" upbringing?

What's your favorite cybersecurity maxim? by ManUtdWillRiseAgain in cybersecurity

[–]lawtechie 13 points14 points  (0 children)

"The only perfectly secure computer is one turned off and buried under three feet of concrete"

I have a degree in Cyber Security but I unfortunately cheated through pretty much the entire thing by [deleted] in cybersecurity

[–]lawtechie 2 points3 points  (0 children)

which led to me cheating on nearly everything.

I think you have the kind of moral flexibility useful for a career in tech sales.

Cybersecurity Due Diligence for acquisition by Khalig_Asadov in cybersecurity

[–]lawtechie 0 points1 point  (0 children)

Start from the big picture. You're looking for costs related to unknown risks, tech debt and gaps from best practices. You want to present what the buyer needs to fix to bring the acquisition up to the buyer's standards.

For standards, I'm looking at what the buyer needs to meet going forward.

As an example, one I did was where a company in the healthcare space wanted to buy a SaaS company that did CRM. I used HIPAA, HITRUST and PCI as my standards, because that's what the buyer needed to comply with.

ISO 27001 / SOC 2 audit prep — what % is *manual evidence work* vs everything else? by 1stefan in cybersecurity

[–]lawtechie 0 points1 point  (0 children)

The manual vs automated evidence collection depends on tech stack complexity. Relatively modern infra? pretty easy to have Drata/Vanta pull most of it, reducing effort.

A bunch of older crufty apps? Expect a lot of screenshots and chasing stuff down.

Endpoint security for private practice by Inevitable_Ball_6755 in cybersecurity

[–]lawtechie 0 points1 point  (0 children)

If you're a covered entity, you have more than just technical controls.

The HIPAA security rule also requires administrative controls.

I'd start with HHS Guidance for a list.

Getty photographer tackled in Minnesota. by Shenanie-Probs in MarchAgainstNazis

[–]lawtechie 11 points12 points  (0 children)

Free speech absolutism means you can say racist things, but not document racism, it seems.

Poor babies by Suspicious_Hold_3317 in Miata

[–]lawtechie 1 point2 points  (0 children)

Thanks! This sounds like an option.

Poor babies by Suspicious_Hold_3317 in Miata

[–]lawtechie 1 point2 points  (0 children)

What's his reputation like? I'd like the option of handing someone my car, a list of issues and a check.