Kat Maddox
Marcus J. Carey, Jennifer Jin · 2020
Kat Maddox is a security architect who frequently calls herself a “one-girl security team.” She focuses on helping small companies get a head start on their security posture and works in fields including vulnerability management, application security, compliance, and risk analysis. This chapter includes Maddox's answers to some questions related to the blue team. To Maddox, the primary capabilities of a blue team should be keeping systems secure but also educating other areas of the business. Blue teams are usually small, so it is crucial to get help from other departments. This includes things such as teaching employees what phishing scams look like, empowering people to champion security, and maintaining good DevSec relationships. Maddox explains how to reward good blue teaming work and start as information security staff member at a small to medium-sized business with a primitive security infrastructure. She expresses her opinion on compliance.