Latest / Tearline / Introducing 'Tearline'

Transcript

Introducing 'Tearline' · Tearline

• 0:02
  Steve: Hello. I'm Steve Townsley, welcome to Tearline. You might have wondered why we chose that name, so I thought I'd start there and tell you a little bit about what we're trying to do. A Tearline comes from the world of intelligence. Imagine you've got a report containing information that could help a much wider group of people, but also the details are sensitive sources and methods that you need to protect.
• 0:28
  The Tearline gives you a way to share the useful intelligence without sharing those sensitive details. And that idea really appealed to us because in cybersecurity, getting a hold of information isn't usually the problem. Making sense of it is. And there's always another attack, another piece of research, another tool to look out, and everything moves so quickly that it's easy to feel like you're falling behind. So what do you do with all of that information?
• 0:58
  Which parts matter to you and more importantly, what can you actually do with them? Well, those are the questions we want Tearline to help answer. We will look beyond the headline, do the analysis and put it into a form that defenders can actually use. We're not here to add more hype or scare people. We want to give you something genuinely useful.
• 1:19
  If we haven't met, I've worked in security for nineteen years across the military and the Royal Marines, in government and then the private sector. Twelve of those years have been dedicated to cybersecurity, and I've run cyber threat intelligence programs. I've led security operation centers and worked as a CISO. And across those different roles, I've come back to the same idea. The better we understand the people we're defending against, the better our decisions can be.
• 1:48
  Now, that doesn't mean there's a shortcut, though. I don't think you can buy a feed or change a setting and call that job done. You have to put the time in, understand how attackers operate, work out where that matters to your organization and get the best out of the tools you have. And that's the kind of depth we want to bring to Tearline. Now, tools of vendors are an important part of this conversation.
• 2:13
  We rely on their products and services and from time to time, we'll partner with vendors or recommend something we think can help. When we do though, we'll choose carefully. These are solutions we believe in and are prepared to stand behind. Often, there'll be things we've actually deployed and operated. But anyone who's worked in security knows that technology is only part of the picture.
• 2:36
  Organizations are complicated, different teams have different priorities, and those priorities don't always line up neatly. Sometimes the biggest step forward isn't a new product at all. It's getting the right people together and agreeing on what matters. So when we talk about security, we'll consider the people and the culture around the technology too. We'll also keep an eye on how attackers are adapting.
• 3:03
  They're inventive, and they change their approach when they need to. At the same time, the older techniques don't just vanish. We need to understand both. What's already familiar or what might come next as technology changes. So who is Tearline for?
• 3:17
  It's for anyone who wants to understand cybersecurity and make better decisions. Now, that might be a CISO deciding where to spend a limited budget, a security operations manager keeping up with attacker techniques, or maybe an engineer looking to get more out of a tool. But it's also for people working in governance, risk and compliance, legal, finance, or any other part of an organization where security plays a role. You don't need to be a technical specialist to find something useful here. The approach behind it comes from our experience in the military where intelligence is part of everyday planning and operations.
• 3:53
  It's there to inform decisions and give you an advantage. And we believe it can do the same for defenders in cybersecurity. That's what we're setting out to do with Tearline. Thanks for being here, and I hope you find it useful.