Episode 162: A Managed Approach to a Managed Attack Surface
In Episode 162 of Cybersecurity Where You Are, Tony Sager sits down with Tina Williams-Koroma, Founder and CEO of TCecure, LLC and CyDeploy, Inc. Together, they discuss why "cyber insecurity is not inevitable" and how organizations can take a managed approach to attack surface management.
Along the way, Tina shares her journey from software development to cybersecurity entrepreneurship and explains why proactive measures like hardening systems and automating patching are critical for reducing risk.
Here are some highlights from our episode:
- 00:50. Introductions to Tina, her career pivot, and her entrepreneurial path
- 03:35. The value of the secure configuration guidance provided by the CIS Benchmarks®
- 07:35. Why a well-managed system makes for a hard target
- 11:00. Marketing against “magic” in a hype-driven cybersecurity market
- 13:44. The translative work of moving well-managed infrastructure beyond "mere hygiene"
- 19:14. Tina's faith-based inspiration for helping others get as far as she's gotten
- 27:23. Soccer analogies for a managed attack surface
- 33:54. Tina's pep talk: "Why cyber insecurity is not inevitable"
- 38:38. Free cybersecurity resources for small businesses
Resources
- Mapping and Compliance with the CIS Benchmarks
- Guide to Asset Classes: CIS Critical Security Controls v8.1
- Gartner Says That in the Age of GenAI, Preemptive Capabilities, Not Detection and Response, Are the Future of Cybersecurity
- CIS Community Defense Model 2.0
- OwlThis — Powered By CyDeploy
If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing [email protected].
As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.