The Open Group

But is there a more effective way for defenders to marshal their resources? Frameworks are not, let's be honest, as exciting as red teaming or threat intelligence, but they're vital if organizations want to make the most effective use of their people, their partners, and yes, their security tools.

Our guest for this episode is Jon Linford, Forum Director of The Open Group's Security Portfolio.

As he puts it, we need to identify the security problems we face and define a top-level approach for solving them before asking the board for more money.

First, though, I asked him whether the cybersecurity risks facing enterprises are on the rise.

There are a couple of different ways to approach this.

The, the first maybe obvious now with how long this has been around at this point, um, is to embrace a zero trust approach.

Uh, right, coming from late 1990s, early 2000s of that deparameterization model, um, now 2020s with some of the work the Open Group's been doing, among others, really emphasizing zero trust as a mindset to modern security.

That always verify, never assumed trust, uh, adjusting your controls, protections around the assets based on what they're actually worth to you as an organization, whether that be in terms of productivity and competitive advantage, or whether that be in terms of cost to you if they are breached or made public.

The single largest carrier of certified Unix today is Apple.

Every version of macOS from 10.5 Leopard through macOS 15 Sequoia 2024 has been certified by the Open Group as conforming to the single Unix specification version 3 branded Unix 03.

The certification is for the full macOS distribution, not for Darwin in isolation.

Darwin, Apple's open-source layer, GNU at XNU, kernel plus FreeBSD-derived user space, has never been certified as its own, but macOS as Apple ships it carries the trademark.

Is Unix light? Linus Torvalds wrote the Unix kernel from scratch in 1991 with no inherited Unix or BSD code.

The standard user line comes from GNU, not from AT&T or Berkeley.

Linux has never been certified by the Open Group.

That's not true.