FirstFire Productions is the trade name associated with a small Alberta corporation that provides music production services and cyber security technology consulting, integration and support services. While music production and cyber security may not initally appear related, it’s a unique skill set held by the corporation’s primary shareholder and director, Doug Leece. FirstFire Tech was originally coined as a domain to make filtering the computer security and music engagements separate, while the music industry has changed for many cyber security has never been more of a concern to companies and individuals, as a result FireFiretech.ca is the appropriate branding and easiest way to reach support.
The whole multi-domain strategy predates cloud solutions like Power Automate under the fancy web interfaces in the many SaaS offerings there are still networks, compute and storage being manipulated by software. It is easy to be convinced that everything will just magically be taken care of but the devil is in the details and misconfigurations are all too common, unfortunately misconfigs can lead to others getting access to your company’s data, money or using your IT resources for their own purposes while you’re stuck with the bill possibly some legal headaches if they attacked other people from your systems.
With more than 25 years as an ICT professional, Mr. Leece has seen and done a lot with technology and related regulatory standards, often responding to security issues similar to those described above. Solving today’s cyber security challenges will take a great many people, “it takes a village” has never been more true. A a result, a great deal of time and resources are committed to to giving back to the security community, including a monthly podcast, active organization of the annual BSides Calgary security conference, work on open source security projects, the occasional blog on risk management and mentoring others in the industry.
Why have two blogs? Similar to the music and computer tech split of years past, meaningful discussions about risk should normally be very light on the technical details, but once senior leadership agrees and defines the path forward it is the technologists that must turn PowerPoint promises into production systems. Those are two very different needs, so two very different blogs seemed natural.
Feel free to reach out with questions, let us know about things you may be working on to lift the cyber community.