Security Teams: Trust the One You're With

What can Stephen Sills' 1970 "Love The One You're With" teach us about information security?  I discuss that within the context of trust in my latest SecurityWeek piece: http://www.securityweek.com/security-teams-trust-one-youre.  I think you'll enjoy it.

All the world's a stage

One can always create another stage upon which to present.  But is that necessarily a good thing for the advancement of the information security profession?  My thoughts in my latest DarkReading piece: http://www.darkreading.com/operations/a-wish-list-for-the-security-conference-stage/a/d-id/1325694

Security Resources: Don't Put All Your Eggs in One Basket

Are you at risk of putting all of your security resources in one basket?  Curious what I mean by that?  Have a look at my latest SecurityWeek piece for a discussion on the topic: http://www.securityweek.com/security-resources-dont-put-all-your-eggs-one-basket.  Hope you enjoy it and find it thought provoking.

What is the Point of Analysis Anyway?

What is the point of analysis anyway?  Does that sound like a provocative or radical question?  I argue that it shouldn't be.  Rather, it's a question that needs to be asked -- and answered.  Curious what I mean by that?  Have a look at my latest piece in SecurityWeek: http://www.securityweek.com/incident-response-what-point-analysis-anyway.

Time to get back to basics when it comes to information security

There is elegance in simplicity.  I'd argue that particularly for small and medium-sized businesses, it's time to get back to basics when it comes to security.  Curious what I mean by that?  Have a look at my latest piece in The Business Journals: http://www.bizjournals.com/bizjournals/how-to/technology/2016/04/information-security-basics.html.  Hope you enjoy.

8 Signs Your Security Culture Lacks Consistency

Culture is an important but often overlooked aspect of a security organization.  In particular, a culture of consistency leads to a better overall security posture.  Does your security organization foster a culture of consistency, or the opposite?  Curious what I mean by that?  Have a look at my latest piece in DarkReading: http://www.darkreading.com/operations/8-signs-your-security-culture-lacks-consistency-/a/d-id/1325286?.

Cyber Insurance: Security Tool or Hype?

Is cyber insurance a useful security tool, or is it merely hype?  I discuss this topic in my latest SecurityWeek piece: http://www.securityweek.com/cyber-insurance-security-tool-or-hype.  I think you'll find my perspective a bit different than others you may have seen, and I hope you enjoy the piece.