About
Services
Activity
11K followers
-
Steve Hindle shared thisMost weeks, the headlines are about attacks. This week, the bigger lesson is about dependency. A medical device manufacturer had order processing and shipping disrupted by a cyberattack. Researchers uncovered backdoors in networking equipment sold globally. At the same time, security teams were grappling with evidence that AI models and agents can be manipulated in ways that are difficult to detect once trust has been established. None of these stories begin with a firewall failure. They begin with assumptions. The assumption that a supplier can be trusted. The assumption that a critical process will keep running during a disruption. The assumption that an AI system will behave tomorrow the same way it behaves today. After years as a CISO, I've found that resilience has very little to do with how many security tools you own. It comes down to how well you understand the handful of dependencies that keep the business alive: the vendors, platforms, operational processes, and people that revenue depends on every day. The question I'd be asking this week is simple: If one critical dependency disappeared tomorrow, would we discover it through planning or through an incident? The organizations that answer that question honestly and act on it will be far more resilient than those focused exclusively on the latest vulnerability or threat campaign. #Cybersecurity #CyberRisk #BusinessResilience #Leadership #Resilience | Simple Security
-
Steve Hindle shared this“Find out who you are and do it on purpose. And do it with purpose,” “Don’t ever sacrifice who you are, your principles and your morals and your values to just try to get ahead in business. It ain’t worth it.” - Dolly Parton I read this today and after the many conversations that I’ve had this week with partners, colleagues, friends, customers, and mentees, I couldn’t possibly agree more. #BeMoreDolly
-
Steve Hindle shared thisSpeed is no longer a security advantage. It's table stakes. This week's headlines weren't connected by a single threat, vulnerability, or ransomware campaign. They all confirmed that attackers are operating faster than the legacy processes that organizations depend on and have built their programs around. Identity attacks, AI-assisted operations, and the rapid weaponization of newly disclosed vulnerabilities continue to compress the time organizations have to react. The real differentiator that stands out in companies' disclosures or published responses from leaders and practitioners isn't who has the most security tools. It's who can recognize risk early, make decisions quickly, and reduce exposure before it becomes a business disruption. Organizations that still measure response in weeks are increasingly facing adversaries that move in days, and sometimes hours. If there's one question leadership should be asking right now, it's this: "Can our identity controls, privileged access processes, and incident response capabilities keep pace with the threat environment we're operating in today?" Because the gap between discovery and exploitation isn't getting wider. It's getting smaller. #CyberSecurity #CyberRisk #Leadership #BusinessResilience #BoardGovernance
-
Steve Hindle posted thisFundamental blocking and tackling. That phrase followed me throughout my career. Sometimes it was the accountability gap between IT and Security. More often, it was the root cause sitting quietly behind incidents, audit findings, and risks that everyone saw coming but nobody owned. What stood out this week was how quickly attackers are turning newly disclosed vulnerabilities into real compromises and how rapidly AI sprawl is creating blind spots. The advantage belongs to whoever moves first. We've spent years talking about patching, visibility, governance, and asset management. None of those topics are particularly exciting, but they're becoming competitive advantages. The conversation I'm having in boardrooms has changed as a result. I spend less time these days discussing whether we're secure and more time asking how quickly we can identify, prioritize, and remediate what isn't. The answer you get to that single question will tell you far more about your true cyber resilience than any dashboard ever will. One practical step I'd recommend: establish and measure a 72-hour remediation objective for critical internet-facing vulnerabilities. Not as a performance metric for security teams, but as a business capability that IT, Security, and leadership own together. The organizations making the biggest gains aren't treating cybersecurity as a compliance exercise or a quick win. They're treating it as an operational discipline. When IT and Security operate as partners instead of opposing forces, resilience improves, customer trust grows, and incident costs fall. At the end of the day, security investments should be measured the same way as any other business investment: by the reduction of operational risk and the business outcomes they enable. #Cybersecurity #Leadership #CISO #CEO #RiskManagement #CyberRisk #BusinessResilience #BoardLeadership | Simple Security
-
Steve Hindle shared thisWhat has changed? It's the question I've been asked this week to address the growing distance between attackers and security controls. In cybersecurity, it's less like Tom and Jerry, and more like Wile E. Coyote and Road Runner. Although, it's often the bad guys who are getting faster and better by exploiting trust rather than technology, using AI-generated voices, deepfakes, and identity-based attacks to slip around controls that many organizations consider mature. In my experience, I've learned that major shifts in cyber risk usually show up as a pattern before they become a crisis. The pattern we're seeing right now is simple: identity has become the battlefield. Whether it's cloud account compromise, voice phishing, executive impersonation, or attacks against operational environments, the common thread is gaining trust first and access second. Business owners should be asking, "How can we verify and trust when the person, voice, message, or request may be convincingly fake?" The organizations that can answer that question with confidence will be far more resilient than those still focused solely on the front-line defenses keeping attackers out. #CISO #cybersecurity #identity #cloud #governance #Exploit #Trust | Simple Security
-
Steve Hindle shared thisThis week reinforced something I've believed for a long time: the biggest threats aren't kicking in doors, they're walking through because they're already trusted. Attackers are increasingly operating through trusted identities, collaboration platforms, AI agents, and operational systems that businesses rely on every day. A critical flaw in identity became the pathway to full enterprise compromise. Ransomware operators are now impersonating internal IT staff over Microsoft Teams. More than 30 water systems in US States were hit in a coordinated attack (and not because of how they vote). At the same time, AI is creating entirely new governance and oversight challenges. What stands out in all this noise isn't any single event or signal. It's the consistent pattern. For years, security teams focused on keeping attackers out. Today's challenge is determining what should be trusted *once they're in*. Every organization is adding automation, expanding digital operations, and giving users, systems, and AI tools more authority to move work faster. That's good for growth. It's also creating larger blast radiuses when something goes wrong. Navigating this effectively won't come from deploying more/new technology. Those organizations will be the ones that understand their trust relationships, limit unnecessary access, and build operations that can keep running when a critical system fails. That's where I'm focusing my attention right now. Not on the next headline, but on the assumptions of trust buried inside the business. #cybersecurity #identity #trust #access #thirdpartyrisk #CISO #governance Simple Security
-
Steve Hindle shared thisWhile there's a flood of Hugging Face posts, cutting through the noise of last week wasn't about a single breach or vulnerability. It was a reminder that the clock is now the biggest risk in cybersecurity. Attackers are moving from disclosure to exploitation in days, sometimes hours. We saw it last week with SonicWall, SharePoint, and WordPress. At the same time, the Hugging Face incident offered a glimpse of what's coming next; Attacks operating at a scale and speed that make traditional response timelines look slow. What stands out to me isn't the tech. It's the operational reality that underpins it all. Most organizations already know how to patch systems, manage vendors, and review access (regardless of whether they do). The challenge is actually doing those things fast enough when adversaries are compressing the window between opportunity and impact. There's a second lesson between this week's headlines. Not every major risk starts with a threat actor. The privacy issues uncovered at financial institutions came from technologies the organizations intentionally deployed. That's a governance problem, not a technical one. If I were sitting in your board meeting today, I'd spend less time discussing threat actors and more time asking one question: How quickly can we identify exposure, make a decision, and act? That's becoming the difference between a security event and a business crisis. Resilient organizations won't necessarily have the largest security teams or budgets. They'll be the ones that make good, informed decisions faster than their peers. #Cybersecurity #RiskManagement #CISO #Leadership #Boardroom #CyberResilience #SecurityStrategy
-
Steve Hindle posted thisThe biggest cybersecurity events of the past week have rarely started with sophisticated hacking. They start when trust is misplaced. Attackers aren't spending all their time breaking through the defensive walls and locks that security has put in place. They're continuing to find ways around them. These include a trusted identity, a collaboration platform everyone depends on, a public-facing web-application that nobody thought to revisit after it was deployed. That's where much of the real risk showed up this week. What stood out to me wasn't any single vulnerability or breach. It was the growing gap between how fast risk is emerging and how fast organizations can make decisions. Microsoft released fixes for 570 vulnerabilities in a single month breaking previous records. CISA warned about active SharePoint exploitation. Researchers uncovered new ways to quietly gather identity data from Microsoft Entra environments. None of those stories matter because they're technical. They matter because every one of them raises the same business question: How quickly can we figure out what actually matters and act on it? I've noticed a shift in conversations with executives and business leaders over the past few years. We spend less time debating security tools and more time talking about confidence. My Co-Founder Simon Linstead and I are driving the often difficult conversations: -> Do you know what's exposed? -> Do you know what's most important? -> Would you recognize a serious issue before it becomes a crisis? Those questions are becoming far more valuable to us here at Simple Security than metrics from a tool or another alert triage. At the same time, AI keeps changing the pace of the game. Defenders are using it. Attackers are using it. The practical impact is simple: the window between exposure and exploitation keeps shrinking. My takeaway this week is straightforward: The organizations that will perform best will be the ones that can see clearly, make decisions quickly, and stay operational when conditions get messy. Not perfection. Not prevention alone. #Control #Clarity and #Speed
-
Steve Hindle posted thisThe gap between disclosure and exploitation is getting smaller, while the barrier to entry for attackers keeps dropping. That's the stories that have been (or should be) keeping security leaders awake this week. What caught my attention wasn't a single breach or headline. It was how the same theme kept showing up from different angles. Cisco and Citrix vulnerabilities were targeted almost immediately. AI is automating parts of the attack process. Credential theft still remains the most reliable way into an organization. -> Speed is becoming the advantage. Attackers are moving faster, scaling faster, and finding new ways to leverage trust, whether through identities, software supply chains, or AI-assisted operations. Over my career, I've found that most organizations don't struggle because they lack awareness. They struggle because they assume they'll have more time to react than they actually do. That assumption is becoming increasingly dangerous. Companies that will differentiate themselves from their competition over the next few years won't be those that try to address or eliminate every risk. They'll be the ones that understand their exposure, protect their identities, manage AI and data security with discipline; and most importantly, can continue operating when something inevitably goes wrong. -> Effective security is no longer just about keeping threats out. It's about staying effective when they get in. As a business owner, CEO, and CISO, the question I'd put in front of any leadership team this week is simple: If a critical vulnerability, stolen credential, or third-party compromise hit tomorrow, how confident are we that we could contain the impact and keep serving customers without meaningful disruption? That's the conversation worth having. #CISO #cybersecurity #stewardship #disruption #resilience #trust #impact #governance Simple Security
-
Steve Hindle reacted on thisSteve Hindle reacted on thisWe're delighted to welcome Jason Shockey as our Senior Vice President, Chief Information Security Officer! Jason brings a wealth of industry experience and leadership, and we are looking forward to all we will accomplish together.
-
Steve Hindle reacted on thisThis one really resonated with me. Trust is a marble jar. Whether it’s your brand, your people or the way you sell, every interaction adds a marble or takes one away. You don’t get to tell people you’re trusted. You earn it, one interaction at a time. Really like how Darren Rippengale and the team at Dxypher Agency have captured this.Steve Hindle reacted on thisTrust is a marble jar. Every interaction either adds a marble or takes one away. That's been rattling around my head, particularly when I think about sales and marketing. Businesses spend an enormous amount of time deciding what they want to tell the market: We're innovative. We're experienced. We're different. We're trusted. But customers don't build trust from what you tell them. They build it from the pattern they see. Your website. Your content. Your people. Your conversations. Your case studies. Your follow-up. Your proposals. The experience after they become a customer. One interaction probably won't win someone's trust. But twenty consistent ones might. And twenty inconsistent ones can empty the jar remarkably quickly. That's something we're thinking about a lot at Dxypher Agency. Perhaps the real job of sales and marketing isn't simply generating attention. It's making sure that everywhere someone encounters your business, they keep finding evidence of the same thing. Because eventually, the pattern becomes the brand.
-
Steve Hindle reacted on thisSteve Hindle reacted on thisToday we're announcing a €3M seed round led by United Ventures, following a €300K pre-seed from strategic investors and advisors. Five years ago I started writing Beelzebub on weekends as an open source project. That project became the foundation for everything we're building today. For decades, attackers and defenders were constrained by the same thing: people. Today that balance is gone. A single operator can run hundreds of attacks in parallel, while defenders still have to investigate, triage and respond to one incident at a time. That's the problem we set out to solve, with the ecosystem we built. Arcangelo continuously simulates a real attacker against the live perimeter. Beelzebub Cloud deploys deception infrastructure that is indistinguishable from production systems, so lateral movement is detected the moment it happens. Caronte reconstructs the attack and produces an incident report in minutes instead of weeks. Today we have: - Many customers and active PoCs across large enterprises, critical infrastructure and government projects - 3 partnerships with providers among the leading names in the market - 2,100+ GitHub stars, with engineers from Microsoft, Google, Anthropic, Akamai, Cisco and AWS among the users - A growing community of 60+ independent researchers feeding field threat intelligence into the platform Thank you to the founding team, to Massimiliano Magrini and United Ventures for believing in this vision before there was a company, and to the researchers who have been contributing to Beelzebub for years.
-
Steve Hindle reacted on thisSteve Hindle reacted on thisWe're hiring! The Risk team at Velera is looking for a Risk Intelligence Program Manager to help drive our ML/AI strategy across Risk and its operations. This fully remote role works at the intersection of business, data science, technology, and external partners to identify opportunities where AI can improve efficiency, reduce risk, and create value for our financial institution clients and Velera. If you're passionate about AI, program management, problem solving, and turning ideas into real business outcomes, apply! https://lnkd.in/gQA8pDfd
-
Steve Hindle reacted on thisSteve Hindle reacted on this2,000 miles later… we made it home. And somehow, in record time. The return journey from The Ionian Islands was considerably quieter than the way out. Just me, the old Land Cruiser and B as co-pilot, with a few brief stops along the way. Romania. Budapest. Reims and the Champagne region. Then France, the tunnel and home. B was an exceptional travelling companion and, frankly, had the better trip. She was thoroughly spoilt in restaurants in Budapest and France while I spent far too much of 72 hours discovering just how grim European service-station food can become. A few lessons from the journey: Book the ferry from Italy in advance next year. Saving money is great. Saving an entire day of driving is better. Britain does not have the European monopoly on potholes. Romania, I'm looking at you. And 72 hours of service-station food is not good for man nor beast. Although B seemed considerably less troubled by it than I was. Unfortunately, I also managed to pick up norovirus somewhere along the way, so my triumphant return home was less conquering European explorer and more please point me towards the nearest bathroom. And because apparently every post I write eventually needs a tenuous link to cybersecurity… Plan ahead, expect things to go wrong, have a backup route and don't assume everything that looks safe at a service station actually is. There you go. Cybersecurity content covered. But the truck didn't miss a beat, the dog was brilliant, we saw some incredible places and made a few more memories along the way. Next year? Definitely again. Just with a ferry from Italy. And next week, after a fairly eventful summer, normality returns. I'm actually rather looking forward to it. Big thanks to Laura Linstead for dealing with the feral children whilst we drove back, and all of you for the encouragement along the way.
Experience & Education
Licenses & Certifications
-
Understanding Terrorism and the Terrorist Threat
Coursera Verified Certificates
-
Interview & Interrogation Techniques - Advanced
John E. Reid & Associates, Inc.
IssuedCredential ID N/A -
Internal Auditor - ISO 27001
British Standards Institution
Issued -
Certified Information Systems Security Professional (CISSP)
(ISC)2
IssuedCredential ID 109238 -
Microsoft Certified Systems Engineer (MCSE)
Microsoft
IssuedCredential ID 1288166
Volunteer Experience
-
Safe and Secure Online
(ISC)²
- Present 17 years 9 months
Children
(ISC)² Foundation educates the most vulnerable members of society – children, through voluntary provision of The Safe and Secure Online (SSO) program. In conjunction with Childnet International, (ISC)² provides online safety programs directly into classrooms to help children and their parents learn how to protect themselves online and become responsible digital citizens.
Created the original Safe and Secure Online training program. In 2010, Steve was presented with the (ISC)2…(ISC)² Foundation educates the most vulnerable members of society – children, through voluntary provision of The Safe and Secure Online (SSO) program. In conjunction with Childnet International, (ISC)² provides online safety programs directly into classrooms to help children and their parents learn how to protect themselves online and become responsible digital citizens.
Created the original Safe and Secure Online training program. In 2010, Steve was presented with the (ISC)2 Presidents Award for advancing the Information Security Profession. He continues to deliver the program today and has done so in schools in three countries since 2009. -
Security & Technology Advisor
Crisis Center of Tampa Bay
- Present 12 years
Social Services
Security & Technology Advisor
Supporting the board for technology and security advice and consultancy to ensure availability and stability of the Crisis Center and associated service provision:
* Suicide prevention hotlines and support for at-risk individuals and their families.
* Specialized trauma counseling and therapy for children, adults and families.
* Forensic examinations, crisis counseling and advocacy for victims of sexual assault.
* Case management and…Security & Technology Advisor
Supporting the board for technology and security advice and consultancy to ensure availability and stability of the Crisis Center and associated service provision:
* Suicide prevention hotlines and support for at-risk individuals and their families.
* Specialized trauma counseling and therapy for children, adults and families.
* Forensic examinations, crisis counseling and advocacy for victims of sexual assault.
* Case management and financial counseling for families with children.
* TransCare Medical Transportation Services - Emergency mental health and life support via 911.
We offer help, hope and healing to all people experiencing life’s problems and challenges, big and small. Our services cover a wide range of needs, regardless of income or ability to pay.
We can help you cope with the devastating trauma of sexual or physical violence, domestic violence or abuse, depression and despair, substance abuse, financial problems, family issues or whenever life’s challenges start to weigh you down. -
IT Steering Committee
Crisis Center of Tampa Bay
- 4 years
Health
Tampa Bay Crisis Center - IT Steering Committee provides strategic leadership for IT and ensures that IT strategy is aligned with the strategic goals of the Crisis Center of Tampa Bay.
Oversight and direction of major IT & Security projects
Board accountability for approval/deferral/declination of new project proposals
Review of changes in IT/business capacity
Review and adjust project priority list
Define and review IT policies and procedures ensuring continuity of operations -
Volunteer
Make-A-Wish America
- Present 8 years
Children
Make-A-Wish Foundation (Southern Florida)
Make-A-Wish is the world’s leading children’s wish-granting organization, serving children in every community in the U.S. and in 50 countries worldwide. More than 40 years ago the inspiration for Make-A-Wish began with one little boy’s wish to be a police officer. Today, together with volunteers, donors, staff and supporters, Make-A-Wish has granted more than 500,000 life-changing wishes and transformed countless lives worldwide.
Volunteer…Make-A-Wish Foundation (Southern Florida)
Make-A-Wish is the world’s leading children’s wish-granting organization, serving children in every community in the U.S. and in 50 countries worldwide. More than 40 years ago the inspiration for Make-A-Wish began with one little boy’s wish to be a police officer. Today, together with volunteers, donors, staff and supporters, Make-A-Wish has granted more than 500,000 life-changing wishes and transformed countless lives worldwide.
Volunteer and Wish Granter-in-training. Wish granters meet with wish kids and their families and help children determine a wish. They also work alongside Make-A-Wish staff and wish families during the wish process.
Publications
-
Webinar Panelist -Cisco Secure
Cisco
See publicationTopic: Cybersecurity Strategies & the Challenges of Supporting Employees in a Hybrid World
-
Webinar Panelist - Cyberclan
Cyberclan
See publicationTopic: Incidentally Informed - How to Achieve Cyber Resilience in Today’s Threat Landscape
-
We Will Stand By Our People!
Issuu, p. 14
See publicationConversation with Jonathan Foreman and Stitch Hindle about a safe working environment.
Courses
-
Chinese Proficiency Test / Standard Examinations for non-native speakers
-
-
Community-led Action in Response to Violent Extremism (CARVE)
Grade = 95.24%
-
Fighting COVID-19 with Epidemiology
Certificate
-
HSK Mandarin - Chinese Studies
-
-
Hànyǔ Shuǐpíng Kǎoshì (HSK) 汉语水平考试
-
-
Johns Hopkins Bloomberg School of Public Health
2020
-
Johns Hopkins Community Teach-Out
-
-
Peking University
2017-2021
-
Preparation for HSK 1
Grade = 100%
-
Preparation for HSK 2
Grade = 98.8%
-
Preparation for HSK 3.1
Grade = 100%
-
Study of Terrorism and Responses to Terrorism (START) Program
UMD Accredited Course
-
Understanding Terrorism and the Terrorist Threat
Grade = 97.6%
-
University of Maryland Graduate School
2015-2017
Projects
-
Security & Technology Advisor on the IT Steering Committee - Crisis Center of Tampa Bay
See projectSince 1972, the Crisis Center of Tampa Bay has been committed to bringing help, hope and healing to people facing serious life challenges.
-
Safe and Secure Online Program development and delivery - (ISC)2 & Childnet International
See projectIn conjunction with Childnet International, (ISC)² provides online safety programs directly into classrooms to help children and their parents learn how to protect themselves online and become responsible digital citizens.
Honors & Awards
-
Keynote Speaker
Florida Technology Summit
Opening Keynote Address: The New IT & Security Perimeter of the Workforce
Real-world insights into how security organizations can increase confidence and trust in the face of complex business disruption and reputational risk. -
CISO of the Month
Cisco CISO Connections community
The Cisco CISO Connections community celebrates people in the cybersecurity industry who are leading the fight against bad actors as well as those creating a secure culture for their organizations.
-
Keynote Speaker
United Healthcare
Forum organized by United Healthcare at the Tampa Bay Buccaneers' HQ
"Certainty in an Uncertain World"
Keynote topic: Duty of care and crisis management -
Keynote Speaker
The Florida Bar Practice Resource Institute, Ft Lauderdale, FL.
Keynote topic: Network Security
-
(ISC)2 Presidents Award for Advancing the Information Security Profession
(ISC)2
Honored with the (ISC)2 Presidents Award for Advancing the Information Security Profession, by developing the "Safe & Secure Online" training program in conjunction with Childnet International, which is used in Schools to keep children safe on the Internet. The program is still being delivered across the globe today by (ISC)2 certified volunteers.
-
(ISC)2 Presidents Award for advancing the Information Security Profession
(ISC)2
(ISC)2 President W. Hord Tipton Award for the voluntary creation and delivery of online safety and security material in schools across the UK to children and parents.
-
Best Security Team
SC Magazine
Nominated and selected as one of the top five “Best Security Teams" by SC Magazine.
-
Featured Speaker
University of South Florida (USF) School of Information
2018-2020
Regular Speaker from 2018-2020 at the USF School of Information for "Senior Capstone Information Day."
Languages
-
English
Native or bilingual proficiency
-
Chinese
Elementary proficiency
Organizations
-
(ISC)2
Member
-
Alliance for Cyber Risk Governance (A.C.R.G.)
Member
-
American Society for Healthcare Engineering
Member
-
ASIS Florida West Coast Chapter 30
Member
-
ASIS International Security Services Council
Member
-
Association of Contingency Professionals
Member
-
Centre for Study of Intelligence Operations
Member
-
China Networking Group 中国人脉社交群
Member
-
CISO Exec Net - Tampa Chapter
Member
-
CSO Roundtable
Roundtable Member
-
Cyber Intelligence Network
Member
-
Cyber Malveillance (FR Gov)
Member
-
Cyber Security Forum Initiative - CSFI
Member
-
Evanta Florida CIO & CISO Community
Governing Body
-
FIRST.org
Member
-
Florida Information Security Professionals Network
Member
-
Forbes Technology Council
Member
-
Gartner CISO Coalition
Member
-
Gartner Security & Risk Management XChange
Member
-
Global Cybersecurity Mentoring
Mentor
-
Guidepoint Global Advisors
Advisor
-
Incident Management Practitioners
Member
-
Infosec Leaders Community (Cynet)
Member
-
Infragard - Tampa Chapter
Member
-
IOSI: Counter-Terrorism and Geopolitical Security
Member
-
Professional Risk Managers' International Association (PRMIA)
Member
-
Professional Risk Managers' International Association (PRMIA)
Member
-
Saint Leo University Alumni Association
Alumni
-
SANS CISO Forum
Member
-
Security Executive Council
Council Member
-
Tampa Bay Business Network
Member
-
The PowerMBA (The Power Business School in association with Harvard Business School
Content Collaborator
-
Visionary Call Center Leaders
Member
-
West Florida Cyber Security Alliance
Member
-
Women in Cybersecurity
Mentor
-
Women in Cybersecurity (WiCy) @University of Tampa
Mentor
Recommendations received
2 people have recommended Steve
Join now to viewOther similar profiles
Explore more posts
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top contentOthers named Steve Hindle in United States
7 others named Steve Hindle in United States are on LinkedIn
See others named Steve Hindle