Our blog

Meet Joe Cozzupoli, Field CISO and Principal Security Advisor at Cosive

What I Learned About Logging and Detection Strategies From Moving House

Moving house isn’t usually the metaphor you’d reach for when talking about security logging and detection — but in my recent move, I couldn’t help but draw the parallels. Packaging, tracking, and discovering the really important items in your environment, all mirrored the challenges we wrestle with through logging strategies and detection engineering.

Why CISOs Should Care About Cyber Threat Intelligence with Joe Cozzupoli

Everyone wants the CISO to care about their corner of the security landscape, so why is Threat Intelligence any different? Cosive Field CISO Joe Cozzupoli argues that CTI can help CISOs prioritise investments of time and budget, and avoid rabbit-holes that waste time defending against irrelevant threats.

Becoming a FIRST.org Member with Terry MacDonald

Security teams often aspire to become FIRST members, but it can be a long and winding road to get there. In this interview, Terry MacDonald breaks down each stage of the journey and charts a path forward. He says that contrary to what many people think, you don't need to be a rockstar organisation to join FIRST.

Australia’s New Gateway Security Guidance: What Leaders & SOC Teams Should Know

On 24 July 2025, the Australian Department of Home Affairs released a major update to its Protective Security Policy Framework (PSPF) as part of the Commonwealth Uplift Reforms, overhauling how government agencies secure their internet gateways. Gateways are the boundary systems controlling traffic between an organisation and the outside world. This update replaces the old Gateway Security Policy with a new, mandatory Gateway Security Standard, which sets minimum security standards that Commonwealth entities must apply for gateway capabilities. In tandem, the Australian Signals Directorate’s Cyber Security Centre (ASD’s ACSC) published updated guidance to align with the new standard and reflect modern security practices. As someone immersed in the challenges of government gateway security at Verizon for over 14 years, I believe the recent advice marks a dramatic shift in approach.