Founder, CEO

Tony Turner

Experienced cybersecurity executive 30+ years, Author of SANS SEC547 Defending Product Supply Chains and Software Transparency.

Expertise

25+ years cybersecurity

Tony is a veteran security architect and engineer with over 25 years experience as an inside security practitioner, third-party consultant and R&D executive across IT and OT. He is the co-author of Software Transparency, authored SANS SEC547 Defending Product Supply Chains, leads the OWASP Orlando chapter, and is the Chief Editor for cyberinformedengineering.com, an open wiki dedicated to evangelizing the concepts of CIE.

Tony founded and leads Opswright as CEO, a software company focused on securing critical infrastructure through threat modeling and secure by design concepts and Cyber Informed Engineering.

EPSS Config Roadmap

Featured article

Establishing a plan of action to start prioritizing configuration flaws

What Is Secure by Design?

Featured article

What is security by design, and how do we do it?

All articles by the author

EPSS Config Roadmap

In

Security Hardening

By

Tony Turner

Establishing a plan of action to start prioritizing configuration flaws

Read

What Is Secure by Design?

In

Secure by Design

By

Tony Turner

What is security by design, and how do we do it?

Read

EPSS for Configuration Flaws

In

Security Hardening

By

Tony Turner

Prioritizing security configuration controls

Read

5 Times I Gained Admin due to Misconfiguration – Part 1

In

Security Hardening

By

Tony Turner

Hospital Compromise due to security misconfigurations and ZERO vulnerabilities

Read

The Secure by Design Pareto Principle

In

Secure by Design

By

Tony Turner

Discussing the need for both short term tactical and long-term strategic planning to achieve Secure by Design.

Read

Securely Architecting the ICS

In

Secure by Design

By

Tony Turner

The role of security architecture assessments in securing the ICS

Read

Threat Modeling for Critical Infrastructure

In

Threat Modeling

By

Tony Turner

A discussion of the importance of critical function understanding to establish a consequences-centric security engineering approach

Read

Unraveling Security Engineering - Product vs Systems in Critical Infrastructure

In

Secure by Design

By

Tony Turner

A discussion of the differences in product security vs systems integration as part of the security engineering process

Read

Securing Critical Infrastructure with SEMM - Security Engineering Maturity Matrix

In

Secure by Design

By

Tony Turner

A framework to mature security engineering inside your organization and understand your capability to design for security

Read

Building Resilient Layered Defenses with a Cyber FMEA

In

Cyber Informed Engineering

By

Tony Turner

Using Failure Mode effects Analysis (FMEA) as a means for validating security defenses and understanding and preparing for failure of tools.

Read

The 5 D's of Cyber Sabotage

In

Cyber Informed Engineering

By

Tony Turner

Understanding adversary objectives in cyber sabotage and their impacts on your critical functions

Read