#SecurityComms

Promotional graphic for Discernible Drills featuring a tabby cat wearing orange sunglasses and holding an orange megaphone. The image announces a new drill titled ‘Code Red Headlines: When Security Incidents Become Front-Page News’ scheduled for Wednesday, August 27, 12-1pm ET or Thursday, August 28, 1-2pm PT in the Discernible Drills Slack. A black ‘Subscribe to join’ button and the URL DiscernibleInc.com/drills appear at the bottom.

In this week’s Discernible Drill, we’ll help you practice:

✅ Identifying technical evidence that helps skeptical reporters understand complex security topics.
✅ Spotting gaps in your PR team's security knowledge that could lead to miscommunication.

#SecurityComms #IncidentResponse

What Could Go Right? Transforming Incident Response Through Positive Framing — Discernible Inc Security teams have long operated under "what could go wrong?" thinking, but this defensive mindset creates hidden pitfalls that limit our effectiveness and political capital within organizations. By ...

Most security teams ask "what could go wrong?" when planning incident response. But asking "what could go right?" changes how they prepare & opens up positive opportunities.

You can thrive (not just survive) through incidents.

#IncidentResponse #SecurityComms

discernibleinc.com/blog/what-co...

🏁FINAL DAY OF OUR 5TH ANNIVERSARY GIVEAWAY 🏁

Last chance to enter: Comment with a blog post from our team that impacted your security practices, and tell us why it mattered.

Every comment increases your chances! Winners notified by end of day.

#InfoSec #IncidentResponse #SecurityComms

Only 1 more day to win! We’re turning 5 and giving away 5 1-year subscriptions to Discernible Drills.

🚨 Get your entries in before tomorrow’s deadline!

Tomorrow we’ll select winners for free subscriptions to our weekly IR comms drills!

Comment & tell us which of our blog posts you liked most.

Each comment = new entry

More participation = better chances!

#SecurityComms #PrivacyComms

Our 5-year anniversary giveaway continues with 5 subscriptions to Discernible Drills Pro up for grabs. ($1,200 value!)

Share which of our blog posts taught you something valuable!

Each post = 1 entry.

Multiple entries encouraged!

Winners selected Friday.

#SecurityComms #IncidentResponse

💫 New Discernible Drill this week!

You’ll face escalating challenges that force difficult tradeoffs between business continuity, stakeholder communications, and technical remediation - all while racing against the clock. 😰

Subscribe at DiscernibleInc.com/drills

#IncidentResponse #SecurityComms

🎉DAY 2 OF OUR ANNIVERSARY GIVEAWAY 🎉

To give back to our amazing community, we’re offering free 1-year Pro subscriptions to our weekly #IncidentResponse communication drills!

To enter: Share which blog post from our team helped you the most & why.

5 random winners chosen Friday.

#SecurityComms

Promotional graphic with text: A new drills arrived tomorrow! Rumor to Reality: When False Claims Lead to Real Discoveries When: - Wednesday, May 14, 12-1pm ET - Thursday, May 15, 1-2pm PT Where: Discernible Drills Slack Subscribe to join: DiscernibleInc.com/drills

🔥 New #SecurityComms drill!

This week, we test how teams handle security communications when public narratives clash with emerging technical findings.

Practice navigating these complex issues in our upcoming simulation!

Subscribe to join: DiscernibleInc.com/drills

#SecurityComms

📬 Mailbag: What's the best approach for sharing vulnerability findings with developers to avoid inciting defensiveness? — Discernible Inc Effectively communicating security vulnerabilities to development teams requires understanding emotional dynamics and reframing findings as opportunities rather than criticisms. By applying proven com...

A reader asked about communicating vulnerabilities to developers.

Shifting from triggering defensiveness to building psychological safety fixes vulnerabilities faster & creates partnerships that make everyone's job easier.

#AppSec #DevSecOps #SecurityComms

discernibleinc.com/blog/-mailba...

In light of recent revelations, our drill this week explores the critical communication challenges that come up after discovering a DPRK operative on your payroll.

Join us Wednesday (12pm ET) or Thursday (1pm PT).

Subscribe at DiscernibleInc.com/drills

#IncidentResponse #SecurityComms

Remember, you can now choose from two different times to fit your schedule.

Register at DiscernibleInc.com/drills

#IncidentResponse #SecurityComms #OpenSourceSecurity

Graphic image with cute cats working on laptops. Text: Did you miss our independent researcher communications drill last week? Subscribe now for this week’s security communications drill: Open Source Supply Chain Incidents Subscribe at DiscernibleInc.com/drills

This week's Discernible Drill is an incident involving open source dependencies.

Subscribe now to join one of our live sessions:

🗓️ Wednesday, April 30, 1-2pm ET

🗓️ Thursday, May 1, 1-2pm PT

DiscernibleInc.com/drills

#IncidentResponse #SecurityComms

Breaking Down Barriers: Insights from Our Recent Bug Bounty Communications Drill — Discernible Inc Information asymmetry and mismatched expectations create unnecessary friction between security researchers and internal teams. Building trust through documentation, giving the benefit of the doubt, an...

Successful vulnerability disclosure depends as much on emotional intelligence as technical skills. When researchers & security teams recognize information asymmetry & extend good faith, friction decreases.

Read more: discernibleinc.com/blog/breakin...

#infosec #BugBounty #SecurityComms

#infosec #SecurityComms #PrivacyComms

Discernible Drills — Discernible Inc

Technical transparency isn't enough! 5 insights from yesterday’s web3 security comms drill:

• Layer explanations
• Make governance accessible
• Use consistent terminology
• Build trust proactively when it’s quiet

Join next week's #BugBounty comms drill!

#SecurityComms #IncidentResponse

Get ready - a new Discernible Drill is coming! Health Data Heartbreak: When Privacy Promises Meet Profit Pressure When: Wednesday, April 9, 12-1pm EST Where: Discernible Drills Slack Subscribe to join: Discerniblelnc.com/drills

Hardest part of privacy incidents? Getting everyone on the same page.

Join our April 9th drill to practice navigating internal politics when privacy concerns clash with business goals.

Subscribe to our weekly simulations to participate: DiscernibleInc.com/drills

#IncidentResponse #SecurityComms

Earning legitimacy with your team and your board as a security leader "Employees are drawn to leaders who can talk about their vision with accurate, honest, and clear direction." Learn more at Discerniblelnc.com/blog

Not Just Security: CISOs are Business Executives

Read the full article: discernibleinc.com/blog/cisos-a...

#infosec #SecurityComms

Discernible Drills — Discernible Inc

The average supply chain attack impacts 1,500+ organizations. Do you know how to communicate — & with whom — when it happens?

Join our Supply Chain Security Communications Drill on April 2.

Subscribe by March 31: discernibleinc.com/drills

#SecurityComms #SupplyChain #IncidentResponse

IR comms isn’t merely crisis response, it’s change management because you’ll never be the same again — and that’s a good thing, use it to your advantage.

The goal is not recovery to your previously known state. The goal is recovery that moves you forward, better than before.

#SecurityComms

Beyond Damage Control: The Science Behind Apologies — Discernible Inc An apology is an opportunity to demonstrate organizational values, rebuild relationships, and emerge stronger.

"I'm sorry" works better than "It wasn't our fault."

New piece from @melanie-ensign.bsky.social on why security incidents need fewer defensive statements and more trust-building strategies. Turns out, protecting pride often backfires.

Read more: lnkd.in/gnB4-c5C

#SecurityComms #IncidentResponse

Zoom lied about encryption in 2020. Now it wants to pay $18 million to make that go away. The internet never forgets, though.

🔥$85M class action settlement
🔥$18M proposed SEC settlement
🔥20-year FTC order

No cyber attacks, no hackers. Simply misleading, inaccurate marketing. COMPLETELY AVOIDABLE.

If your #SecurityComms strategy doesn’t cover PREVENTING self-inflicted incidents, hmu.

mashable.com/article/zoom...

Cloudflare continues to be the standard of what a good security incident write up looks like in web2.

Plenty of other business practices to dislike, but on this point, they are leading the pack — by a lot.

Honest, meaningful, & technically sound.

#SecurityComms #IncidentComms

"Because of how Uber's PM ran our #bugbounty program, the moment the reporter reached out, I was able to respond effectively." Melanie Ensign on the value of collaboration in #securitycomms #cybersecurity #incidentresponse #CriticalPointWarStories

youtu.be/8Ltyei5e1UI