Peter Riedman, CISSP
New York, New York, United States
973 followers
500+ connections
973 followers
500+ connections
About
A dependable, detail oriented, and customer service driven IT professional with…
Articles by Peter
-
SANS FOR500 in New York City
SANS FOR500 in New York City
I'm humbled to have been awarded a SANS challenge coin for the FOR500-Windows Forensic Analysis class offered this past…
Activity
973 followers
-
Peter Riedman, CISSP shared thisVersion 2 of the Backdoors & Breaches card deck has arrived and the new content in the expansion pack looks great. Thanks to John Strand and the team at Black Hills Information Security for putting this together and keeping it updated! #informationsecurity #cybersecurity #incidentresponse #securityawareness #cyberdefense #cyberawareness #informationsecurityawareness #infosecurity #infosectraining
-
Peter Riedman, CISSP shared thisI'm working through a project plan and am trying to make sure I clearly cover all of the bases. When you don't have a rubber duck to debug with, I guess a vulcanized amphibian will have to suffice.
-
Peter Riedman, CISSP shared thisAs 2020 (thankfully) comes to a close, it reminds me that I am completing my 20th year working in IT. Oh how things have changed. Reminds me of this.
-
Peter Riedman, CISSP shared thisSimon Peter Burckhard's post about National Boss Day reminded me of this picture I took a number of years ago (which also explains the poor image quality). At a previous job, I sat in a cubicle right next to my boss who happened to join the company only a few months before I did. Due to the office layout, he sat in a cubicle instead of an office like other managers did. Boss' day was soon approaching so I hatched an idea to build him his very own office using the cardboard boxes from some recently installed network equipment. The workmanship likely violated several building codes but I was particularly proud of the cardboard doors and packing foam door handle. I was stuck in a data center the next day so I missed the big reveal but I heard it was a hit, even though it did lack a ceiling. If anybody wants to give me my own TV show on HGTV after seeing this, I'm open to discussions. Thanks for all of the laughs Charlie Mahlmeister. I hope you've got a much better office these days. #bossday #nationalbossday
-
Peter Riedman, CISSP shared this"Experience is a hard teacher because she gives the test first, the lesson afterwards." – Vern Law
-
Peter Riedman, CISSP posted thisIn IT, there are "full stack" developers & engineers that possess a wide range of skills. In medicine, there are "broad spectrum" antibiotics which fight a wide range of bacteria. Since we're in a pandemic, can I describe myself as a "broad spectrum cybersecurity pro"? Seems fitting these days, no? I call dibs on the trademark!
-
Peter Riedman, CISSP shared thisI was looking for something in my desk drawer today and found this. Back in my network engineer days, I had to run 20+ fiber connections in the data center from some switches to a new SAN being installed. The switches were in the center of the main row of racks and the SAN was in a different row on the other side of our cage. There were several fiber patch points in between and many of the ports weren't labeled. After some tracing, I figured out the splice points but how was I going to validate that it was all connected correctly? Creative problem solving and some odds & ends from Radio Shack resulted in a fiber cable test light that saved me HOURS of troubleshooting. Connected it to one end and looked for the red light at the other end. Viola! All 20+ fiber patches worked like a charm when the SAN got connected the next day. This thing is a good reminder about working smarter, not harder.
-
-
Peter Riedman, CISSP shared thisDear people of Earth. This is the wrong way to protect your computer from a virus. This also happens to be the wrong way to protect yourself from a virus. You're welcome.
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisSo you think you know how to threat model? Many SOCs claim to do formal threat modeling (whether they really do is another story). But let’s talk about the right way–because a half-baked threat model can be worse than none at all, especially when it comes to organization risk. 𝟭. Introspection: Know your business–and its risk • Identify the crown jewels: Which assets, if compromised, would cripple your operations or reputation? • Spiral method: Envision a crime scene–except it hasn’t happened yet (hopefully). Start at your most critical points and circle outward, noting controls in place. • Map your processes: Understand your dependencies, supply chain links, and workflows to figure out where the real business risk lies. 𝟮. Extrospection: Know your threat landscape • Threat actors 101: Who’s targeting your vertical? How do they operate–ransomware, data exfil, or something else? • Outcomes & motives: Whether it's a quick payday or long-term espionage, each threat actor’s endgame shifts your risk profile. • Worst-case mindset: If they succeed, what’s the impact on revenue, reputation, or compliance? 𝟯. Union: Combine Business & Threat Risk • Introspection + Extrospection: Once you see your weaknesses and adversaries' strengths, theoretically set fire to your own org to find the flashpoints. • Prioritize by Risk: Not all threats matter equally. Tackle high-likelihood, high-impact scenarios first. • Feed it back: These insights drive your detection engineering–especially behavioral and sequential detections that address the most significant threats. 𝟰. Evolve: Threat Modeling is Never Done • Track & Iterate: Each exercise introduces new defenses (lowering some risks) and may uncover new attack paths (introducing others). • Stay Current: New business ops, acquisitions, or tech adoptions all shift your threat landscape. Revisit your model regularly. • Continuous Improvement: Capture lessons learned, adjust your controls, and refine your detection logic to stay in step with reality. Threat modeling isn’t just a one-off workshop–it’s a cycle that guides strategic security decisions and aligns detection capabilities with genuine business risk. How do you keep your threat model updated as the business and threat landscape evolve?
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisArtificial intelligence is transforming the legal industry, and Arnold & Porter is continuing to invest in the leadership and innovation needed to help shape what comes next. We’re pleased to announce the appointment of Y. Roger Maeda as the firm’s first Chief Artificial Intelligence Officer. In this new role, Roger will lead Arnold & Porter’s AI strategy, working across the firm to develop and deploy responsible, secure, and practical AI solutions that enhance how we serve our clients. Roger brings deep technical expertise and a strong understanding of the firm’s technology ecosystem, having previously led our enterprise application strategy and software development initiatives as Director of Enterprise Applications and Application Development. As AI continues to evolve, this milestone reflects Arnold & Porter’s ongoing commitment to innovation, responsible AI adoption, and delivering exceptional client service. Please join us in congratulating Roger on this well-deserved appointment. We look forward to the leadership and vision he will bring as Arnold & Porter continues to advance the responsible use of AI in support of our clients. Learn more about Roger’s appointment: https://bit.ly/4aRdHvD
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisA few days ago I posted about Mark Zuckerberg trying to mandate that his employees make work fun again, after Meta laid off around 8,000 people in a year where they cleared $60 billion in profit. As I see it, you probbbbbably don’t roll out mandatory fun unless you already know morale has tanked. Anyway. Someone in the comments said Meta staff are probably “quiet quitting” now. I’d heard the term before but never actually dug into it, so I went down a bit of a rabbit trail looking more into it for a possible future post. And while I was reading up on it, I found this story on Reddit. Dude gives a company 12 years. First in, last out, salaried, never takes real time off. Has a heart attack and is back at his desk in three days. What does he get for it? They log his recovery as “sick pay” and cut his bonus from $5k to $2k. So now he basically shows up on time, leaves on time, and does exactly what’s in the job description and not one thing more. In the end, the company lost a guy who would’ve probably literally died at his desk in exchange for what? A couple thousand dollars? Treat people like they’re disposable long enough and they’ll eventually take your word for it. Crazy.
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisJust finished the course “Threat Modeling for AI/ML Systems” by Adam Shostack! Check it out: https://lnkd.in/ggCZvtwa #threatmodeling #machinelearning #artificialintelligence #aisecurity.
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisToday, OWASP AI Exchange is democratizing AI threat modeling with the launch of 🔓Threat Advisor🔓: an AI that takes a brief description of your system, conducts a tailored interview to identify the threats that apply, and guides you in assessing the risks and deciding how to mitigate them. OWASP® Foundation does it again! The Advisor uses the AI Exchange's threat model section including its decision tree (see picture) and links to the 300 pages of material at the Exchange website, discussing the threats and describing the controls, referring to a range of standards: one of the MOSAIC standards results. Note: We use Google’s NotebookLM, so you need a Google account to access it. Your inputs are not shared with us, and the tool does not access your Google workspace. The service is free and open source, made possible by our sponsors Straiker, Casco (YC X25), and AI Security Academy. Links in the picture and in the comments. Here's what happened: 1️⃣ A few months ago, we launched AI Exchange AGENT — giving instant answers based on 300 pages of the curated and standards-aligned AI security knowledge at owaspai.org. 2️⃣ We then designed a way to let the AGENT interview, but it was tedious and it didn't guide the risk assessment. 3️⃣ Now, we used new features in the AI platform for a smooth interview approach: just describe your AI system and the Threat Advisor will carry the conversation. It's like loop engineering, but for threat modeling. 📣 If you are building or deploying AI, use this to get a high level threat model. It is the fastest way to understand your exposure — and where to focus next. A big thanks to Software Improvement Group who donated the threat framework to the Exchange, OpenCRE for linking all sources together, Spyros Gasteratos for building pipelines, and as always: the OWASP AI Exchange authors group: the think tank powering it all.
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisMost AI governance frameworks fail one simple test. Pressure. Not policy. They survive committee review. They fail at the moment of decision. It comes down to four questions. 1. The Authority Test: Can you pause it? Name the one person empowered to shut down a live AI tool immediately. When everyone owns the risk, no one owns the decision. 2. The Defense Test: Can you prove it? Produce the decision log showing why an AI tool was approved. A decision you can reconstruct is a decision you can defend. 3. The Visibility Test: Can you see it? Identify who tracks silent vendor updates before they go live. No visibility. No governance. 4. The Response Test: Can you speak to it? When an AI tool fails publicly: - who drafts the statement - who approves it - who speaks for the institution If a headline names your institution, a human owns the output. You don't need a stronger policy. You need a name. A log. A watcher. A voice. Which one would be hardest to answer today? 1. Pause authority 2. Decision records 3. Vendor visibility 4. Incident response ♻️ Repost this for the leader building governance that holds. ➕ Follow Tiffany Masson, Psy.D. for AI governance that survives pressure.
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisIt’s kinda overwhelming, and wouldn’t necessarily recommend it forever, but it’s actually an advantage to start your IT career as a “jack of all trades.” You can learn a lot really quickly and get exposed to many different disciplines that may result in you finding what you’re most passionate about. https://lnkd.in/gY6uxuu7
-
Peter Riedman, CISSP liked thisPeter Riedman, CISSP liked thisAfter 7 incredible years at TrustedSec, it was time for a new set of technical challenges. I’m incredibly excited to announce that I have joined Blackthorne Consulting as a Principal Consultant working in the offensive security space. I look forward to helping to build up technical capabilities with this amazing team!
-
Peter Riedman, CISSP liked thisExcited to speak at #CrowdTour2026 in Boston June 2nd, to highlight Cox Automotive’s journey in SOC transformation and AI innovation, with a focus on measurable outcomes and real operational impact. This milestone reflects the talent, dedication, and strong collaboration across our teams—Servio Urgiles, Gary Shear, John Cammarano, Jon Mahes, Imran Akhtar, Vikas Tiwari, and Steve Ocasio. Grateful for the continued top-down support from our leadership—Dan Constantino, Brad B. and Marianne McPeak-Johnson—for enabling this transformation and making it a reality! https://lnkd.in/g-XBSYeY
Experience
-
Confidential
-
-
-
-
-
-
-
-
-
-
Education
Licenses & Certifications
Volunteer Experience
Courses
-
SANS FOR500: Windows Forensic Analysis
FOR500
-
SANS SEC522: Application Security: Securing Web Apps, APIs, and Microservices
SEC522
-
SANS SEC530: Defensible Security Architecture and Engineering
SEC530
-
SANS SEC560: Network Penetration Testing and Ethical Hacking
SEC560
Honors & Awards
-
SANS challenge coin holder- Windows Forensics (FOR500)
SANS
Organizations
-
BSides Long Island
Volunteer
Recommendations received
9 people have recommended Peter
Join now to viewOther similar profiles
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content