
Former CISO pitches four-question whiteboard threat modeling
Lora Vaughn told an ISC2 congress in Denver a short exercise can guide spending without a long report.
1
4 stories, newest first · one card per story

Lora Vaughn told an ISC2 congress in Denver a short exercise can guide spending without a long report.

At ISC2 Security Congress, Mark Weatherford said boards should decide who accepts AI risk and avoid spending driven by fear of missing out.

The group will not write new standards; it aims for employer hiring toolkits, with a first meeting in November.

The still-unnamed exam has six domains, a December 2026 beta, and a four-year experience rule with CISSP waivers.
Today 1.2K readers · 1.8K views · 1.4K reads · all time 160K views