Hiding in Plain Sight

No one really believes in security by obscurity anymore, do they?  Sadly, some people still do, but probably for different reasons than you might expect.  I discuss this topic -- with a twist -- in my latest SecurityWeek piece: http://www.securityweek.com/hiding-plain-sight-why-your-organization-cant-rely-security-obscurity.  Hope you enjoy.

20 Questions Security Professionals Should Ask Ourselves

This month, like the previous several months, brings with it the latest installment in the 20 questions series.  In this installment, I discuss 20 questions we should be asking ourselves.  Curious what I mean?  Have a look at my latest piece in DarkReading: http://www.darkreading.com/endpoint/crowdsourcing-20-answers-to-security-ops-and-ir-questions/a/d-id/1327865?.

Good Security is a Marathon, Not a Sprint

If you cut corners in security, you may be able to fool a few people in the near-term.  But in the long-term, you won't fool anyone at all.  There is elegance in simplicity, but foolishness in over-simplification (and over-complication for that matter).  Curious what I mean?  Have a look at my latest piece in SecurityWeek: http://www.securityweek.com/good-security-marathon-not-sprint.