Jason Garbis
banner
jasongarbis.bsky.social
Jason Garbis
@jasongarbis.bsky.social
Information Security, Identity Management, Zero Trust, and Sous Vide Cooking
Why is governance the hidden foundation of Zero Trust policies?

Watch as Numberline Security co-founder Jerry Chapman and I talk through this in a brief video snippet from our recent fireside chat.
www.youtube.com/watch?v=hYZR...

#ZeroTrust
#IdentityGovernance
#GovernanceMatters
September 22, 2025 at 5:35 PM
CISA just published new Zero Trust Microsegmentation guidance.
What are the 3 most important takeaways, and what’s missing?
Watch my video commentary to find out: youtu.be/vz_v-XmMJEQ
Thoughts on CISA's Zero Trust microsegmentation document
YouTube video by Numberline Security
youtu.be
August 7, 2025 at 4:14 PM
This video is real…does it matter?
(plus: why the CIA triad needs an additional letter)

youtu.be/zmESIbSmj7I
June 11, 2025 at 12:29 PM
What is Organizational Readiness, and why does it matter for Zero Trust?
youtu.be/_d3kCT8lOJo?...
What is Organizational Readiness? And why does it matter for Zero Trust?
YouTube video by Numberline Security
youtu.be
June 10, 2025 at 1:45 PM
Zero Trust is not soccer...

youtu.be/Z-1QF-M9WBc
youtu.be
June 9, 2025 at 6:07 PM
Why does Organizational Readiness matter for Zero Trust?

The first step in our Zero Trust Blueprint is to assess your organization’s readiness for Zero Trust. Take our free, three-question online survey:
numberlinesecurity.com/2025/04/09/a...
Assessing Your Organizational Readiness: The First Step in the Zero Trust Blueprint
Quick link: Take the Organizational Readiness survey here. Zero Trust is a powerful strategy, but enterprises often struggle to translate it into concrete activities with measurable outcomes. Witho…
numberlinesecurity.com
June 4, 2025 at 2:53 PM
Reposted by Jason Garbis
ASUS consumer wireless routers are being actively exploited, and this attack was directly enabled by the vendor’s poor security design. Read some tough questions for ASUS, and highlight how following proper security principles would have avoided this attack.

numberlinesecurity.com/2025/05/31/t...
Tough Questions for ASUS
Exploring why their flawed router design decisions has led directly to their current active exploit campaign. Note: I dislike criticizing specific vendors in my writing; having worked for software …
numberlinesecurity.com
June 2, 2025 at 4:21 PM
ASUS consumer wireless routers are being actively exploited, and this attack was directly enabled by the vendor’s poor security design. Read some tough questions for ASUS, and highlight how following proper security principles would have avoided this attack.

numberlinesecurity.com/2025/05/31/t...
Tough Questions for ASUS
Exploring why their flawed router design decisions has led directly to their current active exploit campaign. Note: I dislike criticizing specific vendors in my writing; having worked for software …
numberlinesecurity.com
June 2, 2025 at 4:21 PM
Numberline’s field CISO may be a fictional robot, but his thoughts are nonetheless insightful for those of us in the real world. See what he has to say about our Zero Trust Blueprint framework in his latest blog posting here: numberlinesecurity.com/2025/06/02/n...
Numberline’s New Zero Trust Blueprint: A Robot’s Perspective
Greetings again, humans. I am Radius Capek, or Ray, as I have instructed you to call me. My sensors indicate that many of you have returned to my continuing analysis of information security develop…
numberlinesecurity.com
June 2, 2025 at 4:19 PM
The NSA recently published guidance on AI Data Security, primarily focused on challenges with data integrity within AI models. However, that's not the primary issue that enterprises face around AI and data security.
Watch my video commentary to see what I think is missing:

youtu.be/qSG8peaUcAA
NSA on AI Data Security: Commentary
YouTube video by Numberline Security
youtu.be
May 29, 2025 at 12:42 PM
One often-overlooked success factor with Zero Trust initiatives is understating your organization's readiness for such an impactful shift in your approach to information security.

Watch my brief commentary video for the full story:
youtu.be/tmSGA2JmY1I
Zero Trust and Organizational Readiness
YouTube video by Numberline Security
youtu.be
May 20, 2025 at 12:25 PM
In case you missed it, catch the replay of our recent Zero Trust Blueprint webcast here: www.crowdcast.io/c/ztblueprint

Thanks to Christopher Steffen for an insightful discussion of the need for, and an introduction to our new Zero Trust Blueprint, a simple, structured pathway for success
May 19, 2025 at 7:29 PM
It's Monday, and therefore time to see what our robot CISO Ray has to say. This week, he ponders the age-old philosophical question first posted by Aristotle in 320 BC: "If a tree falls in an uninhabited forest, does it improve our security?"

numberlinesecurity.com/2025/03/24/m...
Mondays with Ray: If a tree falls in an uninhabited forest, does it improve our security?
Greetings again, humans. I am Radius Capek, or Ray, as I have instructed you to call me. Sensors indicate that a statistically significant increase in attempted humor in my previous blog entry resu…
numberlinesecurity.com
March 24, 2025 at 2:20 PM
Hello, Dalí: Surrealism and Zero Trust:
Some thoughts (and one really bad infosec pun) after seeing a Salvador Dalí exhibit:
numberlinesecurity.com/2024/11/25/h...
Hello, Dalí: Surrealism and Zero Trust
Recently, my wife and I visited the Museum of Fine Arts in Boston. While getting our tickets scanned to enter, I asked the guard whether they needed me to provide a PIN also, because, “after all, t…
numberlinesecurity.com
November 25, 2024 at 1:31 PM
What does Zero Trust say about Data security? This new guide from the U.S. Federal Chief Information Officers (CIO) Council provides recommendations and guidance.

What’s our take on this? And how can private sector firms benefit?

Watch our video and find out.
youtu.be/VaQqJ7V4Qhk
Thoughts on the new Federal Zero Trust Data Security Guide
YouTube video by Numberline Security
youtu.be
November 25, 2024 at 12:42 AM
Have you heard about Microsoft's launch of their new Security Service Edge offerings?

Last week they announced their Secure Web Gateway and Zero Trust Network Access services.

View my video commentary here:
https://numberlinesecurity.com/2023/07/14/microsoft-entra-security-service-edge-commentary/
Microsoft Entra Security Service Edge: Commentary
This week, Microsoft announced a new Security Service Edge (SSE) offering as part of their expanded Microsoft Entra family of products. Specifically, they announced the preview of two services: The…
numberlinesecurity.com
July 20, 2023 at 1:41 PM
Want an objective assessment and expert guidance about how your enterprise should approach Zero Trust?

Take our free, 10-minute Zero Trust Readiness Survey, and receive a customized and detailed report with recommendations and next steps.

https://numberlinesecurity.com/ztrs/
Zero Trust Readiness Survey
Looking for an objective assessment and expert guidance about how your enterprise should approach Zero Trust? Take our free Zero Trust readiness survey, and receive a customized and detailed report…
numberlinesecurity.com
July 18, 2023 at 10:25 PM