1-877-550-4728
Steve Maxwell
Senior Security Consultant
Experience
Steve has more than 20 years of experience, ranging from software development, software quality, performance engineering, information security, and internal audit. Before TrustedSec, Steve performed a number of functions supporting security initiatives within the retail and healthcare industries. He has presented to and trained hundreds on automation, performance engineering, and attack mitigation techniques.
Education & Certifications
CISSP; PCI-QSA; CISA; received his BS from the University of Utah.
Passion for Security
Steve’s passion for security has grown out of a technical background in optimizing enterprise stability, which naturally led to work for stability through security. He enjoys presenting the value of security to both technical and executive staff.
Recent Blog Posts
Six Crucial Network Segmentation Actions
We are constantly barraged with new technologies and techniques for securing the enterprise. Every new thing we are told is crucially important, and if you don’t master all of it now, you are the next breach headline. It is intimidating to say the least. It is easy to look past the basics of securing the...
Read
Don’t Delay, Migrate Today (Away from SSL/Early TLS)
For those tempted to delay migration away from Secure Sockets Layer (SSL)/early Transport Layer Security (TLS)—don’t wait! This includes all versions of SSL and version 1.0 of TLS (TLS v1.1 and newer are fine). For Payment Card Industry Data Security Standard (PCI-DSS) compliance, you can’t simply migrate sometime before your next PCI audit. Rather, you...
Read
PCI v3.2.1 is here!
Version 3.2.1 of the PCI DSS was just released by the PCI Security Standards Council (PCI-SSC). As a minor version, it primarily included clarification updates and one correction to a requirement reference. Most of the changes center around the removal of the January 31st date, which expired this year. Appendix A2.1-A2.3 was updated to focus...
Read
Recent Webinars
Network Segmentation for the Rest of Us! How to get your segmentation project moving toward zero trust.
Recorded July 24, 2019 at 1:00 P.M. EST The idea of segmenting your network is not new. However, even in 2019, we still see companies with flat networks ripe for attack. This provides a much greater opportunity for malicious actions...
Recent Podcasts
Process, Process, Process
July 12, 2020
Let Us Diagnose Your Information Security Failings
July 12, 2020
(For Workgroups) Ghidra, Citrix and Beto Oh My!
July 12, 2020
