#securitycommunications — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #securitycommunications, aggregated by home.social.
-
New Mini Discernible Experience!
A critical security vulnerability is discovered during a routine system audit, but team members disagree on the severity and immediate reporting requirements.
💫 Communication Challenge: How would you facilitate a constructive team discussion to reach consensus on the incident's impact and next steps without creating internal friction?
#SecurityCommunications #IncidentResponse
If you like thinking through communication challenges like these, subscribe to our weekly Discernible Experience and sharpen your strategic comms skills.
DiscernibleInc.com/experience
-
Your AI service provider has a critical vulnerability that's exposing customer conversation snippets across different client platforms.
💫 Communication Challenge: How would you approach customer communications when the root cause is a third-party service you've integrated?
#DiscernibleExperience #IncidentResponse #SecurityCommunications
-
A ransomware attack has completely halted production across 12 manufacturing facilities in different countries, costing $20 million per day.
💫 Communication Challenge: How would you coordinate communication across multiple time zones, languages, and regulatory environments during this crisis?
#DiscernibleExperience #IncidentResponse #SecurityCommunications
If you want more experience thinking through communication challenges like these, subscribe to our weekly Discernible Experience.
-
Your third-party AI service has been inadvertently exposing customer conversation data through its API responses for six weeks.
💫 Communication Challenge: How would you coordinate messaging between legal, customer success, and technical teams?
#DiscernibleExperience #IncidentResponse #SecurityCommunications
-
Question #1: who are our customers?
-
Discernible Experience Mini:
Your new DDoS protection system is accidentally blocking 89% of legitimate customer traffic. Customer support is fielding hundreds of angry tickets.
💫 Communication Challenge: What talking points would you provide to your support team that explain the technical issue?
-
If you like thinking through communication challenges like these, subscribe to our weekly Discernible Experience and sharpen your strategic skills.
DiscernibleInc.com/experience
#DiscernibleExperience #IncidentResponse #SecurityCommunications
-
A senior data engineer is leaving your company and has downloaded 2.3 TB of sensitive customer data. Your CISO wants an immediate assessment.
💫 Communication Challenge: How would you map out which stakeholders need to be informed, and what information they should receive?
#DiscernibleExperience #IncidentResponse #SecurityCommunications
-
⚡️ Don't wait for a real incident to test your communication skills.
Our weekly interactive #SecurityCommunications drills let security professionals practice handling real-world scenarios like insider threats, data breaches, and supply chain compromises --- while networking with industry peers.
Try your first month FREE with code FREEMONTH.
Start practicing today → DiscernibleInc.com/drills
-
☄️ Master security incident communication skills before you need them.
Our weekly interactive #SecurityCommunications drills help security professionals practice their communication skills in real-world scenarios like insider threats, data breaches, and supply chain compromises --- while meeting new people from the community.
Try your first month FREE with code FREEMONTH.
Start practicing today → DiscernibleInc.com/drills
-
🍔🍟 New Discernible Drill Alert!
The recent McDonald’s AI hiring chatbot disclosure got us thinking about how unprepared most organizations are for third-party AI security incidents.
We’ve developed a new incident comms drill that puts security teams in the hot seat when researchers discover critical vulnerabilities in AI platforms. The twist? You’re not just managing technical remediation - you’re navigating:
🛣️ Multiple disclosure pathways (coordinated, immediate, regulatory)
🤝 Complex researcher relationships and coalition dynamics
🫣 Uncooperative vendors who resist transparency
📊 Business continuity during peak operations
🎯 Incident communication across franchise networksHow confident are you in managing researcher disclosure timelines when your vendor relationship becomes adversarial? When was the last time your team practiced coordinating with security researchers on a vendor vulnerability impacting your customers?
This drill forces teams to think beyond technical fixes to strategic communication that can either enhance or destroy your security reputation based on how you handle researcher relationships.
Subscribe to join at DiscernibleInc.com/Drills
-
🔥 New Discernible Drill this week!
Recent Scattered Spider attacks on airlines highlight the challenges of responding to a network compromise when every minute of downtime affects thousands of passengers and critical safety operations.
Our latest drill scenario puts you in the SOC during an active airline intrusion. You'll navigate the unique communication challenges of balancing security containment with operational continuity when flight schedules, passenger safety, and regulatory compliance are all on the line.
Perfect for:
✈️ SOC analysts and engineers
✈️ Incident response teams
✈️ Anyone working in critical infrastructure securityThe aviation industry's complex operational requirements create communication scenarios you won't find in typical incident response training.
Ready to see how you'd handle it?
Subscribe to join at DiscernibleInc.com/drills
-
Most organizations think security communications = crisis PR, but this narrow focus actually sabotages the media relationships they're trying to protect.
When security incidents hit the news, journalists aren't starting from scratch -- they're drawing on accumulated context about your organization's communication patterns and competence built over months or years.
That means the real work of effective security communications happens in internal meetings, stakeholder interactions, and organizational messaging long before any reporter gets involved.
Here's a new post from us on building comprehensive security communications that strengthen rather than undermine your credibility: https://discernibleinc.com/blog/sabotage-media-relations-by-misunderstanding-security-communications
-
🔥 New #SecurityCommunications drill dropping tomorrow!
Ever found yourself caught between security excellence and business reality?
That moment when you know the “right” security approach, but timeline pressures are mounting and stakeholders are asking tough questions about “good enough”?
This week’s Discernible Drills scenario puts subscribers in the hot seat as senior security engineers navigating the tension between security idealism and delivery.
The conversations that happen during software development, architecture decisions, and project planning are often where we prevent incidents from happening in the first place. This drill helps build those proactive communication skills.
Subscribers will get the chance to practice in a low-risk environment as a team with other members of the security community.
✅ Focusing on sustainable security decision-making frameworks, not just crisis response
✅ Communicating security trade-offs to non-technical stakeholders
✅ Building strategies for maintaining security standards & team morale during necessary compromises
✅ Develops criteria for when to push back vs. when to accept business constraints
This is about building the communication skills and decision frameworks that help security professionals thrive in the real world of competing priorities.
Perfect for security engineers, security architects, and anyone who’s ever had to explain why “it passes the audit” doesn’t mean “it’s secure.”
Subscribe to join at DiscernibleInc.com/drills
-
Incident response as a competitive advantage? Absolutely! 🔥
Last week's Discernible Drill challenged security pros to switch from "damage control" to "what could go right?" thinking during a ransomware scenario. The results were remarkable.
One team developed a brilliant competitive differentiation strategy that positioned their organization as "incident-tested" versus competitors with only theoretical capabilities.
Their approach:
💡Create side-by-side comparisons of recovery capabilities vs. industry standards
💡 Develop messaging around being "Proven Under Pressure"
💡 Use actual incident metrics as sales tools
This is the power of positive incident framing. When you prepare excellently, incidents become proof points that no marketing campaign can match.
Here’s the catch: If you want the opportunity to use incident response in this way, you have to plan for it to ensure you’re demonstrating excellence. It won’t happen by accident.
Read our full analysis from the drill:
-
Maybe the issue isn't that boards need more security experts. Maybe it's that security leaders need to get better at working within existing governance structures and prove their priorities align with business goals.
Board seats are limited. Every function thinks they deserve one.
Instead of expecting for perfect security expertise from the board, what if we focused on building cybersecurity literacy among the smart folks already there?
-
What if we flipped the script on incident response communications?
Most IR drills ask "what could go wrong?" But what if we started asking "what could go RIGHT?"
Our latest Discernible Drills challenges subscribers to practice positive incident framing during a ransomware scenario. Instead of just damage control, participants learn to:
✅ Transform incident communications into competitive advantages
✅ Identify opportunities to strengthen stakeholder relationships
✅ Reverse engineer foundational investments that enable excellent responses
✅ Convert incident response into lasting business valueTraditional IR training focuses on minimizing impact. This drill teaches teams to maximize opportunity.
By strengthening your skills in positive framing, you don't just respond to incidents more effectively -- you can fundamentally change your role within the organization, becoming a strategic partner who helps businesses navigate challenges while identifying opportunities for growth.
Ready to practice turning your next incident into a new competitive advantage?
-
There are a lot of great things to say about generalization in the communications field, but you won't find them in my latest blog post about #SecurityCommunications.
The Specialists Edge: Security Communications Can’t Be Generic
-
🪲 New Security Communication Drill: The Bug Bounty Researcher's Perspective
Join us tomorrow for an interactive security communication drill that flips the script on traditional security exercises. Instead of focusing on the vendor side, we'll put participants in the shoes of security researchers navigating the challenges of vulnerability disclosure.
This hands-on scenario will challenge you to:
🐛 Navigate security assessments with limited visibility into internal architectures
🐞 Build credibility when you have less system context than internal teams
🐛 Communicate effectively through multi-layered teams (triage vendors vs. security engineers)
🐞 Balance respect for internal expertise while confidently advocating for your findings
🐛 Manage disclosure expectations under tight time constraints
🐞 Push for security improvements without full visibility into compensating controls
Whether you're a security researcher, bug bounty program manager, or security engineer, this drill offers valuable insights into improving communications in the vulnerability disclosure process from both sides.
🗓️ Date: Wednesday, April 23
🕰️ Time: 12pm ET
🗺️ Location: Discernible Drills Slack🔥 Subscribe to Join: DiscernibleInc.com/drills
-
Key takeaways from yesterday’s web3 security communications drill:
💡 Technical transparency alone doesn't cut it
📝 Layer explanations for different knowledge levels
🗣️ Translate governance into everyday impacts
📘 Establish consistent terminology across teams
⏱️ Disclose proactively before questions arise
🔄 Build trust through regular security updates
Join next week's bug bounty comms drill!
🧠 Remember: All scenario briefings & postmortems are available to subscribers in our Slack.
-
📢 "Trust Chain Turmoil" incident communications drill - tomorrow April 16!
When your Web3 protocol faces a social media smear campaign based on technical misunderstandings, how do you respond?
Our simulation puts security practitioners in the hot seat to practice:
✅ Explaining complex issues to executives
✅ Crafting clear security messaging for internal peers
✅ Defending protocol integrity without jargon
Join our weekly drills subscription to participate!
Subscribe at DiscernibleInc.com/drills
-
New blog: 🧱 Build These 5 Communication Assets Before Your Next Security Incident
Don't wait for an active event to create your communication strategy. Like firefighters who maintain equipment before emergencies, security teams need proactive assets that demonstrate capability and build trust.
Read about the 5 critical communication tools you should develop now: https://discernibleinc.com/blog/5-things-immediately-improve-ir-communications
-
New post: "The CISO's Communication Playbook"
Security isn't just technical—it's psychological. Learn how five evidence-based communication theories can transform your influence as a security leader.
Read the full article: https://discernibleinc.com/blog/ciso-communication-playbook
#Cybersecurity #CISO #infosec #SecurityCommunications
-
What happens when a dependency your systems rely on is compromised?
Test your response in our Supply Chain Security Communications Drill on April 2.
Experience real-time decision-making challenges and develop practical communication strategies for complex security incidents.
Subscribe by March 31 to participate: https://discernibleinc.com/drills
#SupplyChainSecurity #SecurityCommunications #IncidentResponse
-
💫 NEW CASE STUDY: How Discernible helped CISO Amy Bogac navigate executive communications and career transition
"Never did I ever think that I would need a personal incident response plan and public relations expert to help manage media inquiries or questions." —Amy Bogac, Baker Tilly CISO
Read how she secured a $1B+ organization CISO role: https://discernibleinc.com/blog/building-ciso-resilience-strategic-communications
-
🗄️ from our archives: "Training to Become a Savable Victim"
Just as rescue scuba divers learn to be cooperative victims, executives need to know how to support cybersecurity teams during incidents.
This reader-favorite post explores how leadership teams often become "unsavable victims" by disrupting response efforts, and what CISOs can do about it.
Read the full post: https://discernibleinc.com/blog/empowering-business-leaders-to-be-savable-victims-drawing-incident-response-insights-from-rescue-scuba-diving
-
You wake up to your phone buzzing. It's not supposed to do that at this hour. Not unless something is very, very wrong.
What will you do in the critical first hour?
Join our next immersive blockchain security communications simulation where split-second decisions collide with core DeFi principles.
Multiple stakeholders.
Millions at stake.
Only a few minutes to act.Can you balance technical truth with human realities when the clock is ticking?
Register today to join our weekly drills and participate in next week's Web3 simulation.
#Web3Security #IncidentResponse #SecurityCommunications #ProfessionalDevelopment
-
We're growing our weekly Discernible Drills and want YOUR input!
Help us select the best times to add by taking our quick scheduling survey.
It takes less than 2 minutes to complete — and your feedback will ensure we can accommodate as many participants as possible in our expansion.
📋 Survey link: https://forms.gle/W8KjwQqEYGHr2Rxy8
-
🔥 Launching today: Discernible Drills - our new weekly security/privacy communication training delivered via Slack!
Based on 20 years of experience in, this new service helps security and privacy professionals practice communication skills through weekly 60-minute drills.
- Covers 12 different incident types
- Text-based with multimedia elements for auditory learners
- No PO required - individual subscriptions
- Currently runs Wednesdays 12-1pm ET with more times coming soon
- Two tiers: $50/mo or $100/moSecurity incidents are more than breaches, and communication is more than media statements. Practice makes perfect.
Learn more at https://discernibleinc.com/blog/introducing-discernible-drills
#InfoSec #SecurityCommunications #CyberSecurity #PrivacyCommunications #IncidentResponse
-
🔥 Launching today: Discernible Drills - our new weekly security/privacy communication training delivered via Slack!
Based on 20 years of experience in, this new service helps security and privacy professionals practice communication skills through weekly 60-minute drills.
- Covers 12 different incident types
- Text-based with multimedia elements for auditory learners
- No PO required - individual subscriptions
- Currently runs Wednesdays 12-1pm ET with more times coming soon
- Two tiers: $50/mo or $100/moSecurity incidents are more than breaches, and communication is more than media statements. Practice makes perfect.
Learn more at https://discernibleinc.com/blog/introducing-discernible-drills
#InfoSec #SecurityCommunications #CyberSecurity #PrivacyCommunications #IncidentResponse
-
🔥 Launching today: Discernible Drills - our new weekly security/privacy communication training delivered via Slack!
Based on 20 years of experience in, this new service helps security and privacy professionals practice communication skills through weekly 60-minute drills.
- Covers 12 different incident types
- Text-based with multimedia elements for auditory learners
- No PO required - individual subscriptions
- Currently runs Wednesdays 12-1pm ET with more times coming soon
- Two tiers: $50/mo or $100/moSecurity incidents are more than breaches, and communication is more than media statements. Practice makes perfect.
Learn more at https://discernibleinc.com/blog/introducing-discernible-drills
#InfoSec #SecurityCommunications #CyberSecurity #PrivacyCommunications #IncidentResponse
-
🔥 Launching today: Discernible Drills - our new weekly security/privacy communication training delivered via Slack!
Based on 20 years of experience in, this new service helps security and privacy professionals practice communication skills through weekly 60-minute drills.
- Covers 12 different incident types
- Text-based with multimedia elements for auditory learners
- No PO required - individual subscriptions
- Currently runs Wednesdays 12-1pm ET with more times coming soon
- Two tiers: $50/mo or $100/moSecurity incidents are more than breaches, and communication is more than media statements. Practice makes perfect.
Learn more at https://discernibleinc.com/blog/introducing-discernible-drills
#InfoSec #SecurityCommunications #CyberSecurity #PrivacyCommunications #IncidentResponse
-
🔥 Launching today: Discernible Drills - our new weekly security/privacy communication training delivered via Slack!
Based on 20 years of experience in, this new service helps security and privacy professionals practice communication skills through weekly 60-minute drills.
- Covers 12 different incident types
- Text-based with multimedia elements for auditory learners
- No PO required - individual subscriptions
- Currently runs Wednesdays 12-1pm ET with more times coming soon
- Two tiers: $50/mo or $100/moSecurity incidents are more than breaches, and communication is more than media statements. Practice makes perfect.
Learn more at https://discernibleinc.com/blog/introducing-discernible-drills
#InfoSec #SecurityCommunications #CyberSecurity #PrivacyCommunications #IncidentResponse
-
Are you subscribed to our monthly newsletter?
Sign up to receive insights on current security and privacy communication issues, scholarship, and research.
This month we covered:
✅ Truthfulness in incident communications
✅ How relationships communicate more than words
✅ How message fatigue and audience interest impact the persuasiveness of security and privacy teams
✅ Alternatives to outdated militaristic analogies courtesy of @shortridge's new bookYou won't receive any marketing spam from us -- your email address is used only to send you the newsletter each month.
#SecurityCommunications #PrivacyCommunications #CommunicationResearch
-
📬 Mailbag Reader Question
A reader asks: Where should security communications be on the organization chart?
Read the response from CEO @Wednesday at: https://discernibleinc.com/blog/security-communications-org-chart
-
Join our mailing list to receive our monthly newsletter.
In each issue, you’ll receive:
🧠 Perspectives on the current privacy and security communications landscape from Discernible founder Melanie Ensign
🧠 Compelling information about communications theory
🧠 The latest in communications research
🧠 Our favorite podcast episode of the month
🧠 Spotlights on diversity, inclusion, and equity nonprofits serving the technology industry
If this sounds like something you’d like in your inbox once a month, sign up below!
We respect your privacy and autonomy over your data. We only use this information to send you Discernible’s monthly newsletter. Nothing else.
#SecurityCommunications #PrivacyCommunications #CommunicationsResearch #StrategicCommunications
-
Are you subscribed to our monthly newsletter?
Sign up to receive insights on current security and privacy communication issues, scholarship, and research.
This month we covered:
✅ Truthfulness in incident communications
✅ How relationships communicate more than words
✅ How message fatigue and audience interest impact the persuasiveness of security and privacy teams
✅ Alternatives to outdated militaristic analogies courtesy of @shortridge's new bookYou won't receive any marketing spam from us -- your email address is used only to send you the newsletter each month.
#SecurityCommunications #PrivacyCommunications #CommunicationResearch
-
Are you subscribed to our monthly newsletter?
Sign up to receive insights on current security and privacy communication issues, scholarship, and research.
This month we covered:
✅ Truthfulness in incident communications
✅ How relationships communicate more than words
✅ How message fatigue and audience interest impact the persuasiveness of security and privacy teams
✅ Alternatives to outdated militaristic analogies courtesy of @shortridge's new bookYou won't receive any marketing spam from us -- your email address is used only to send you the newsletter each month.
#SecurityCommunications #PrivacyCommunications #CommunicationResearch
-
Are you subscribed to our monthly newsletter?
Sign up to receive insights on current security and privacy communication issues, scholarship, and research.
This month we covered:
✅ Truthfulness in incident communications
✅ How relationships communicate more than words
✅ How message fatigue and audience interest impact the persuasiveness of security and privacy teams
✅ Alternatives to outdated militaristic analogies courtesy of @shortridge's new bookYou won't receive any marketing spam from us -- your email address is used only to send you the newsletter each month.
#SecurityCommunications #PrivacyCommunications #CommunicationResearch
-
Join our mailing list to receive our monthly newsletter.
In each issue, you’ll receive:
🧠 Perspectives on the current privacy and security communications landscape from Discernible founder Melanie Ensign
🧠 Compelling information about communications theory
🧠 The latest in communications research
🧠 Our favorite podcast episode of the month
🧠 Spotlights on diversity, inclusion, and equity nonprofits serving the technology industry
If this sounds like something you’d like in your inbox once a month, sign up below!
We respect your privacy and autonomy over your data. We only use this information to send you Discernible’s monthly newsletter. Nothing else.
#SecurityCommunications #PrivacyCommunications #CommunicationsResearch #StrategicCommunications
-
All team members have psychological, often unspoken, contracts with their organizations.
If an employer appears to fall short in delivering on their commitments, an employee may perceive a breach of that mental agreement, impacting employee attitudes and behavior.
Scholars from the University of Amsterdam and the London Business School looked at the impact of ongoing organizational changes such as downsizing, restructuring, and reengineering on employees' psychological contracts.
Their research reveals unique triggers involved in these breaches, which build up pressure until a threshold is surpassed. The study highlights the importance of managers learning how to de-escalate the accumulation of triggers for their team members.
Read the full report: https://onlinelibrary.wiley.com/doi/full/10.1002/job.2645
Sign up for our newsletter and receive more insights from contemporary communication research: https://discernibleinc.com/newsletter-signup
#SecurityCommunications #PrivacyCommunications #CommunicationsResearch #Leadership
-
All team members have psychological, often unspoken, contracts with their organizations.
If an employer appears to fall short in delivering on their commitments, an employee may perceive a breach of that mental agreement, impacting employee attitudes and behavior.
Scholars from the University of Amsterdam and the London Business School looked at the impact of ongoing organizational changes such as downsizing, restructuring, and reengineering on employees' psychological contracts.
Their research reveals unique triggers involved in these breaches, which build up pressure until a threshold is surpassed. The study highlights the importance of managers learning how to de-escalate the accumulation of triggers for their team members.
Read the full report: https://onlinelibrary.wiley.com/doi/full/10.1002/job.2645
Sign up for our newsletter and receive more insights from contemporary communication research: https://discernibleinc.com/newsletter-signup
#SecurityCommunications #PrivacyCommunications #CommunicationsResearch #Leadership
-
All team members have psychological, often unspoken, contracts with their organizations.
If an employer appears to fall short in delivering on their commitments, an employee may perceive a breach of that mental agreement, impacting employee attitudes and behavior.
Scholars from the University of Amsterdam and the London Business School looked at the impact of ongoing organizational changes such as downsizing, restructuring, and reengineering on employees' psychological contracts.
Their research reveals unique triggers involved in these breaches, which build up pressure until a threshold is surpassed. The study highlights the importance of managers learning how to de-escalate the accumulation of triggers for their team members.
Read the full report: https://onlinelibrary.wiley.com/doi/full/10.1002/job.2645
Sign up for our newsletter and receive more insights from contemporary communication research: https://discernibleinc.com/newsletter-signup
#SecurityCommunications #PrivacyCommunications #CommunicationsResearch #Leadership
-
All team members have psychological, often unspoken, contracts with their organizations.
If an employer appears to fall short in delivering on their commitments, an employee may perceive a breach of that mental agreement, impacting employee attitudes and behavior.
Scholars from the University of Amsterdam and the London Business School looked at the impact of ongoing organizational changes such as downsizing, restructuring, and reengineering on employees' psychological contracts.
Their research reveals unique triggers involved in these breaches, which build up pressure until a threshold is surpassed. The study highlights the importance of managers learning how to de-escalate the accumulation of triggers for their team members.
Read the full report: https://onlinelibrary.wiley.com/doi/full/10.1002/job.2645
Sign up for our newsletter and receive more insights from contemporary communication research: https://discernibleinc.com/newsletter-signup
#SecurityCommunications #PrivacyCommunications #CommunicationsResearch #Leadership
-
All team members have psychological, often unspoken, contracts with their organizations.
If an employer appears to fall short in delivering on their commitments, an employee may perceive a breach of that mental agreement, impacting employee attitudes and behavior.
Scholars from the University of Amsterdam and the London Business School looked at the impact of ongoing organizational changes such as downsizing, restructuring, and reengineering on employees' psychological contracts.
Their research reveals unique triggers involved in these breaches, which build up pressure until a threshold is surpassed. The study highlights the importance of managers learning how to de-escalate the accumulation of triggers for their team members.
Read the full report: https://onlinelibrary.wiley.com/doi/full/10.1002/job.2645
Sign up for our newsletter and receive more insights from contemporary communication research: https://discernibleinc.com/newsletter-signup
#SecurityCommunications #PrivacyCommunications #CommunicationsResearch #Leadership
-
Got questions?
Submit them anonymously through our blog & we’ll publish the answers in a future post.
-
Got questions?
Submit them anonymously through our blog & we’ll publish the answers in a future post.
-
Got questions?
Submit them anonymously through our blog & we’ll publish the answers in a future post.