Articles by 'Steve Gold'

Blog Author - Steve Gold

Steve Gold is the Cybersecurity Practice Director at Gotham Technology Group (Gotham). He is responsible for providing the vision and thought leadership to expand Gotham’s legacy of success and build a world-class cybersecurity practice. He works closely with Gotham’s customers, industry partners, and subject matter experts to develop relevant solutions for Gotham’s clients and prospects.

Prior to joining Gotham, Steve worked with the Center for Internet Security (CIS), where he expanded the global reach, revenue, and impact of the CIS Benchmarks, CIS Controls, and CIS Hardened Images. He led the efforts to promote the CIS portfolio of low-cost and no-cost cybersecurity products and services that help private and public organizations stay secure in the connected world. He grew a team of security specialists from 12 to over 40 to assist organizations with implementing security best practices in their continual journey of cybersecurity maturity.

During his more than 20-year career, Steve led teams responsible for developing and implementing technology solutions at some of the industry’s most recognized companies such as Varonis, VMware, Dell & Wyse Technology

Steve is a frequent speaker/moderator at industry conferences and webinars, covering a wide array of information security topics. He resides and works remotely in Baltimore, MD.

By Steve Gold, Posted in Security

In Severance, the employees of Lumon Industries live in a world of strict compartmentalization. Your work self cannot access what your personal self knows, and you certainly cannot wander into another department's floor without authorization. Every boundary is enforced at the threshold, with no exceptions. That is exactly what good network traffic filtering looks like. What Is Perform Traffic Filtering Between Network Segments? Traffic filtering between network segments means controlling what can talk to... read more.

  • August 25, 2026

By Steve Gold, Posted in Security

In Andor (2022), the rebel intelligence cell at Ferrix doesn't wait for the Empire to announce its arrival. They funnel every signal, every movement, every comm transmission into a single command center and watch the whole network in real time. The moment something looks wrong, someone knows. That is exactly what a Network Intrusion Detection System does for your enterprise, and CIS Safeguard 13.3 says you should have one. What Is Deploy a Network Intrusion Detection Solution? A Network Intrusion Detectio... read more.

  • August 18, 2026

By Steve Gold, Posted in Security

In HBO's The Last of Us (2023), the cordyceps fungus does its most dangerous work quietly, at the individual host level, before anyone realizes what is happening. By the time the network-level symptoms appear, containment is already a long shot. The parallel to cybersecurity is uncomfortable but exact. Host-based intrusion detection is about catching the infection on the machine where it starts, before it moves anywhere else. What Is Deploy a Host-Based Intrusion Detection Solution? A host-based intrusion... read more.

  • August 11, 2026

By Steve Gold, Posted in Security

When the oxygen tank ruptured on Apollo 13, mission control didn't learn about it from a single alarm. They learned about it from a constellation of anomalies: pressure readings, power fluctuations, thruster telemetry, all converging on one floor in Houston at the same time. That centralized view of every system on the spacecraft is what gave the team the context they needed to understand what was happening. Individual data points told a partial story. The correlation told the truth. That is exactly what C... read more.

  • August 04, 2026

By Steve Gold, Posted in Security

In The Bourne Identity, Jason Bourne is a CIA operative, one of their best. But the moment he goes off the grid and stops authenticating through official CIA channels, something critical happens: the CIA loses the ability to support him, track him, or protect the mission. They can't help what they can't see. Resources dry up. Oversight vanishes. The whole operational picture breaks down because one asset is running without accountability to the infrastructure designed to support, and protect, him. Your rem... read more.

  • July 28, 2026

By Steve Gold, Posted in Security

In The Imitation Game, the German military was completely confident in Enigma. Every message encrypted. Every transmission is “secure”. The whole operation ran on the assumption that the protocol was unbreakable, right up until Alan Turing and the team at Bletchley Park cracked it wide open. The flaw wasn't in the operators. It was in the protocol itself, and the senders had no idea. WEP was the Enigma of Wi-Fi security. And a lot of networks are still running its spiritual successors. What Is... read more.

  • July 21, 2026

By Steve Gold, Posted in Security

In the Matrix, nobody gets in or out without going through the operator. Tank sits at that console controlling every phone line, every exit, every connection. When Neo needs access to a building, Tank gets him in. When Morpheus needs an exit, Tank finds it. There's no "I'll just slip through the back door on my own." The operator is the single authoritative system that knows who's plugged in, where they're going, and what they're doing, and that centralized control is exactly what makes the resistance funct... read more.

  • July 14, 2026

By Steve Gold, Posted in Security

In Raiders of the Lost Ark, Indiana Jones doesn't wander into the Well of Souls hoping to stumble across the Ark of the Covenant. He has a map. More specifically, he has the headpiece of the Staff of Ra, the one piece of information that tells him exactly where to dig. Without it, Belloq and the Nazis spent weeks excavating the wrong location. They had resources, manpower, and determination. What they didn't have was accurate intelligence about the terrain. Your network is the Well of Souls. The question i... read more.

  • July 07, 2026

By Steve Gold, Posted in Security

In Mission: Impossible, Ethan Hunt's team never broadcasts mission details over open channels. Every transmission is encrypted, every agent is authenticated, and the briefing self-destructs after viewing. The IMF doesn't leave sensitive operational details lying around where anyone can intercept them, because they understand that the channel matters just as much as the message. Meanwhile, plenty of organizations are still managing their routers, switches, and firewalls over Telnet. That's the network equiv... read more.

  • June 30, 2026

By Steve Gold, Posted in Security

Before Danny Ocean and his crew ever set foot inside the Bellagio, they spent weeks mapping it. Every zone. Every vault. Every access control point. Every camera blind spot. They understood the architecture better than the people who designed it, and that's exactly why they succeeded. Attackers do the same thing to your network. They map it. They probe segment boundaries. They look for flat areas where one compromised endpoint can reach everything else. They find the places where "least privilege" was the... read more.

  • June 23, 2026