Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/ Exploring the intersection of cybersecurity, psychology, and resilience. Fri, 14 Nov 2025 18:34:47 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 https://jeanchristophvonoertzen.com/wp-content/uploads/2020/10/favicon-4.png Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/ 32 32 What Fantasy Role-Playing Games Can Teach Us About Cybersecurity Roles https://jeanchristophvonoertzen.com/what-fantasy-role-playing-games-can-teach-us-about-cybersecurity-roles https://jeanchristophvonoertzen.com/what-fantasy-role-playing-games-can-teach-us-about-cybersecurity-roles#respond Fri, 14 Nov 2025 18:34:47 +0000 https://jeanchristophvonoertzen.com/?p=1760 — And why your SOC might actually need a Bard 🐉⚔️ Cybersecurity teams are often compared to armies, fire brigades, or special forces. Personally? I think they’re much closer to a party of heroes in a classic fantasy role-playing game. No matter how many frameworks, SIEMs, or AI tools we summon, defending a digital kingdom […]

The post What Fantasy Role-Playing Games Can Teach Us About Cybersecurity Roles appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/what-fantasy-role-playing-games-can-teach-us-about-cybersecurity-roles/feed 0 Lessons from Sun Tzu’s “The Art of War” in Cybersecurity: Timeless Wisdom or Outdated Tactics? https://jeanchristophvonoertzen.com/sun-tzu-the-art-of-war https://jeanchristophvonoertzen.com/sun-tzu-the-art-of-war#respond Sat, 29 Mar 2025 13:08:40 +0000 https://jeanchristophvonoertzen.com/?p=1742 Introduction Sun Tzu’s "The Art of War" is a legendary strategic treatise written more than 2,500 years ago. Its enduring principles of warfare strategy have transcended military boundaries, influencing disciplines from business management to competitive sports. In today’s digital age, its relevance is increasingly apparent in the cybersecurity landscape, particularly for CISOs of medium-sized enterprises, […]

The post Lessons from Sun Tzu’s “The Art of War” in Cybersecurity: Timeless Wisdom or Outdated Tactics? appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/sun-tzu-the-art-of-war/feed 0 Ransomware Resilience Starts in the Mind: Overcoming Cognitive Biases and Decision-Making Errors in Cybersecurity https://jeanchristophvonoertzen.com/ransomware-resilience-cognitive-biases https://jeanchristophvonoertzen.com/ransomware-resilience-cognitive-biases#respond Sun, 09 Feb 2025 18:52:45 +0000 https://jeanchristophvonoertzen.com/?p=1510 Why We Keep Losing Despite Stronger Security Controls Over the past three years, businesses have almost doubled their confidence in cybersecurity—rising from 32% in 2021 to 54% in 2024 (The Global Cost of Ransomware Study, 2025). Despite this, ransomware’s impact has only grown: 40% of affected companies suffered significant revenue losses, 58% experienced operational downtime, […]

The post Ransomware Resilience Starts in the Mind: Overcoming Cognitive Biases and Decision-Making Errors in Cybersecurity appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/ransomware-resilience-cognitive-biases/feed 0 AI Cyber Security 2025: Key Threats and Essential Strategies for Your Business https://jeanchristophvonoertzen.com/ai-cyber-security-2025 https://jeanchristophvonoertzen.com/ai-cyber-security-2025#respond Tue, 21 Jan 2025 07:05:05 +0000 https://jeanchristophvonoertzen.com/?p=1505 Artificial Intelligence is transforming businesses and industries worldwide, but with this transformation comes unprecedented challenges. The recent launch of Cisco AI Defense, a specialized AI security solution, highlights the urgency of securing AI applications. According to Cisco, only 29% of enterprises feel fully prepared to detect and prevent unauthorized manipulations of AI systems. This low […]

The post AI Cyber Security 2025: Key Threats and Essential Strategies for Your Business appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/ai-cyber-security-2025/feed 0 SPQA: A Radical AI Architecture—and Why Security Must Adapt https://jeanchristophvonoertzen.com/spqa-a-radical-ai-architecture-and-why-security-must-adapt https://jeanchristophvonoertzen.com/spqa-a-radical-ai-architecture-and-why-security-must-adapt#respond Sat, 21 Dec 2024 18:00:04 +0000 https://jeanchristophvonoertzen.com/?p=1486 Introduction Until recently, many developers laughed at the notion that Artificial Intelligence might write their code someday. Yet code assistants like Cursor, Bolt.new, and Copilot—already adopted by 51% of enterprises [1]—show how swiftly AI is reshaping software development. At the same time, spending on generative AI skyrocketed from $2.3 billion in 2023 to $13.8 billion […]

The post SPQA: A Radical AI Architecture—and Why Security Must Adapt appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/spqa-a-radical-ai-architecture-and-why-security-must-adapt/feed 0 European Cybersecurity Awareness Month: Key Takeaways for a Safer Digital Future https://jeanchristophvonoertzen.com/european-cybersecurity-awareness-month-key-takeaways-for-a-safer-digital-future https://jeanchristophvonoertzen.com/european-cybersecurity-awareness-month-key-takeaways-for-a-safer-digital-future#respond Mon, 02 Dec 2024 23:16:02 +0000 https://jeanchristophvonoertzen.com/?p=1482 October is synonymous with the European Cybersecurity Awareness Month (ECSM), a time when cybersecurity professionals around the world unite to promote awareness and share valuable insights. Throughout this month, I shared a series of LinkedIn posts that highlighted various facets of cybersecurity, including password managers, multifactor authentication (MFA), the dangers of phishing, and the revolutionary […]

The post European Cybersecurity Awareness Month: Key Takeaways for a Safer Digital Future appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/european-cybersecurity-awareness-month-key-takeaways-for-a-safer-digital-future/feed 0 CISSP Essentials: Why It’s Crucial Beyond IT and My Best Exam Prep Tips https://jeanchristophvonoertzen.com/cissp-essentials-why-its-crucial-beyond-it-and-my-best-exam-prep-tips https://jeanchristophvonoertzen.com/cissp-essentials-why-its-crucial-beyond-it-and-my-best-exam-prep-tips#respond Sat, 27 Jul 2024 16:42:00 +0000 https://jeanchristophvonoertzen.com/?p=1456 What is the CISSP (for non-IT people)? Most people in my social circle aren’t involved in information security, nor are they in IT. So when I shared my achievement of passing the CISSP exam, they congratulated me, but I could see in their eyes that they were uncertain about how much of a celebration I […]

The post CISSP Essentials: Why It’s Crucial Beyond IT and My Best Exam Prep Tips appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/cissp-essentials-why-its-crucial-beyond-it-and-my-best-exam-prep-tips/feed 0 Webinar takeaway – MailFail – Who’s Spoofing Your Email and How Are They Doing It? https://jeanchristophvonoertzen.com/webinar-takeaway-mailfail-whos-spoofing-your-email-and-how-are-they-doing-it https://jeanchristophvonoertzen.com/webinar-takeaway-mailfail-whos-spoofing-your-email-and-how-are-they-doing-it#respond Thu, 27 Jun 2024 18:22:15 +0000 https://jeanchristophvonoertzen.com/?p=1452 My key takeaways SPF ensures that the SMTP FROM domain explicitly allows the connecting IP address. SPF does NOT ensure that the email address seen by the user is the one which was checked. the existance of SMTP FROM and the From field is a vulnarability: SPF checks SMTP FROM but most mail clients show […]

The post Webinar takeaway – MailFail – Who’s Spoofing Your Email and How Are They Doing It? appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-mailfail-whos-spoofing-your-email-and-how-are-they-doing-it/feed 0 Boosting Cybersecurity in German SMEs with Gamification and Serious Play https://jeanchristophvonoertzen.com/boosting-cybersecurity-in-german-smes-with-gamification-and-serious-play https://jeanchristophvonoertzen.com/boosting-cybersecurity-in-german-smes-with-gamification-and-serious-play#respond Wed, 01 May 2024 13:14:14 +0000 https://jeanchristophvonoertzen.com/?p=1409 TL;DR Gamified cybersecurity training offers an engaging and effective way to improve security awareness and practices within German SMEs. The ALARM Information Security project demonstrates the success of integrating gamification into training, enhancing retention and understanding of cybersecurity principles. By leveraging customized game scenarios, regular workshops, and participatory feedback loops, SMEs can bolster their cybersecurity […]

The post Boosting Cybersecurity in German SMEs with Gamification and Serious Play appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/boosting-cybersecurity-in-german-smes-with-gamification-and-serious-play/feed 0 Unlock Effective Cybersecurity: Simplify Policies with the Clarity of the OSI Model https://jeanchristophvonoertzen.com/unlock-effective-cybersecurity-simplify-policies-with-the-clarity-of-the-osi-model https://jeanchristophvonoertzen.com/unlock-effective-cybersecurity-simplify-policies-with-the-clarity-of-the-osi-model#respond Mon, 18 Mar 2024 23:01:59 +0000 https://jeanchristophvonoertzen.com/?p=1336 TL;DR Diving into the essence of effective cybersecurity, this article shines a light on the transformative power of simplifying policy language, inspired by the OSI model’s structured communication layers. It goes beyond theoretical insights, offering actionable strategies for CISOs to demystify complex jargon and make cybersecurity policies accessible and engaging for every team member. Highlighting […]

The post Unlock Effective Cybersecurity: Simplify Policies with the Clarity of the OSI Model appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/unlock-effective-cybersecurity-simplify-policies-with-the-clarity-of-the-osi-model/feed 0