LastPass's Christofer Hoff on navigating incidents while rebuilding the security org from scratch

The Future of Security Operations podcast is back for a sixth season, and, to kick it off, Thomas is joined by Christofer Hoff.

Christofer has over 30 years of experience in network and information security architecture, development, engineering, operations, and management, including security leadership roles at Bank of America, Citadel, and Juniper Networks. He’s currently Chief Secure Technology Officer at LastPass, a unique role that combines the duties of CSO and CTO, while also serving on the board at FIDO Alliance.

In this episode:

[02:00] How blogging landed Christofer his first couple of jobs in security

[06:50] Taking a more holistic approach to security through collaboration

[09:40] Rebuilding LastPass's security org from scratch

[12:03] Reflecting on incidents - what LastPass did right

[16:12] Communicating with customers and the broader community during incidents

[20:15] Navigating tech debt as a security leader

[23:55] The biggest challenges AI has produced for his team

[25:16] How LastPass uses an AI working group for decision-making

[29:00] The evolving challenges of browser security

[35:05] Passkeys, passwords and the future of secure authentication

[41:40] Tips on hiring and structuring effective security teams

[46:47] How LastPass creates efficiency through automation

[50:38] The biggest changes he'd like to see in security

[54:44] Connect with Chris

The Future of Security Operations is brought to you by Tines, the orchestration, automation, and AI platform that powers some of the world’s most important workflows.

Where to find Christofer Hoff:

• LinkedIn

• Chris's Rational Survivability blog

Where to find Thomas Kinsella:

• LinkedIn

• Tines

Resources mentioned:

• Chris on Google’s Cloud Security Podcast

• LastPass Security Incident Summary