Ambassador

Tomas Honzak

VP, CISO at Vendavo

Czech RepublicVerified Community Ambassador

Identified Expertise

Content Tomas is Following

Do you trust the data & reports from the big analysts?

Strategy & Architecture

Yes

Sometimes

View Results

111.8k views123 Upvotes58 Comments

Which of the following best describes your biggest challenge with object storage?

Storage

Performance

High cost

Rate of Data Growth

Other (none of the above)

View Results

8.9k views1 Upvote3 Comments

We are looking for a WAF for our new SaaS system which uses GraphQL API. The concern is that AWS WAF might not be suitable; the "free" OWASP ruleset would not suffice and custom rules means manpower investment and ongoing costs. Any experience or recommendation would be appreciated!

Peer Insights Public Cloud

123 views

Nowadays, many SaaS tools offer SSO integration as a premium feature, sometimes effectively doubling the price-per-user. What is the right way to find balance between when to invest and leverage SSO and when to keep the costs lower and handle the provisioning and de-provisioning manually?

Security & GRC Disruptive & Emerging Technologies

Tomas HonzakVP, CISO at Vendavo in Software6 years ago

It depends on what the original authentication method is. We require multi factor PIV authentication and can only use FedRAMP approved cloud providers which have been vetted to meet NIST requirements so I wouldn’t have an ...read more

745 views1 Comment

Interested in hearing how folks define “cyber resilience” for their current org – is it mainly about minimizing risk/potential losses for you, minimizing MTTR, or something else altogether?

Resilience Security Strategy & Roadmap

Tomas HonzakVP, CISO at Vendavo in Software2 years ago

From an high level perspective, I look at cyber resilience from the lens of three lines of defense, management controls, risk management, and internal audit. Management controls must include the monitoring process (cybersecurity ...read more

How do you enhance network security?

Tomas HonzakVP, CISO at Vendavo in Software2 years ago

Hard to give a specific answer without having context, but let me try anyways:
- Create network diagram and review the flow of data through it. Pay attention to understand their sensitivity.
- Review the segmentation ...read more

2k views1 Comment