Real world table-top exercises: Your founder/CEO has just bet the company on some third-party vaporware tech. How do you integrate this into your security plan while simultaneously dealing with your team heading for the exits?

Jan 7, 2022 · 3:47 PM UTC

8
5
1
27
Replying to @hal_pomeranz
Sadly, I think many startups call that “Tuesday”.
1
4
Replying to @hal_pomeranz
Of
Replying to @hal_pomeranz
More real world for me is the founder/CEO is the one touting the vaporware to customers, and I'm the one that needs to make things happen (and set reasonable expectations) for the customers. Fortunately, it's been a while 😀
2
Replying to @hal_pomeranz
Engage an MSSP. There exists a risk that your CEO is right and you’ll need to scale up your capabilities in short order. Bonus is that you’re also covered to keep the lights on while everyone jumps ship.
Replying to @hal_pomeranz
Same scenario, but with a new parent company and their awful DOS ERP app from 2004 that’s been “updated” by dressing it in a GUI, no other changes. Oh, and it requires SMB1.And for the last twist of the knife, the barcode scanners that feed it use telnet.
1
Replying to @hal_pomeranz
Vaporware? Create a wireframe that pretends to sso into it and update the resume?
Replying to @hal_pomeranz
You create an outsourcing plan and update your resume so that everyone can head to the exit and someone who wants to do that work can do it. Did I get it right?
1
Replying to @hal_pomeranz
I don't like jumping ship, but I've also been in too many bad situations where CEOs don't listen to the experts they hired before making big decisions like this.
2
GIF
This tweet is unavailable
I’m an IR consultant. I operate strictly “right of boom”. 😀
8