Jason Schorr
Marcus J. Carey, Jennifer Jin · 2020
Jason Schorr serves as chief operating officer for Spyglass Security. Most recently acting as project lead, he helped develop Data Drifter, a tool to analyze the contents of insecure cloud storage buckets. This chapter presents Schorr's answers to questions related to the blue team. He defines the blue team as anyone who's actively working to keep networks safe from malicious actors. Schorr suggests ways for blue teamers to learn, practice, and grow, and presents his thoughts on some core metrics that a blue team can use to build, measure, and maintain a successful information security program. He explains that host-based firewalls are the best bang-for-security-buck control. Schorr shares his approach to data governance and other methods of reducing data footprint, opinion on compliance, as well as strategies to communicate the threats he encounter to nontechnical decision-makers.