Thursday, September 5, 2019

What can the Segway teach us about security?

What could the Segway possibly have to do with security?  More than you might initially realize.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/what-segway-can-teach-us-about-information-security.  I'll think you'll find that the article takes you on an interesting ride.

Wednesday, August 7, 2019

Security and the Infinite Capacity to Rationalize

Better security begins with putting an end to rationalizing and replacing it with logic.  How so?  I discuss in my latest DarkReading piece: https://www.darkreading.com/threat-intelligence/security-and-the-infinite-capacity-to-rationalize-/a/d-id/1335400.

Sunday, August 4, 2019

What does summer vacation have to do with information security?

What could summer vacation possibly have to do with security?  More than you might initially realize.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/what-does-summer-vacation-have-do-information-security.  Enjoy your summer.

Sunday, July 7, 2019

20 Questions to Ask During a Real (or Manufactured) Security Crisis

There are important lessons to be learned from a crisis, even the ones that are more fiction than fact.  I discuss what questions to ask during a crisis (whether real or manufactured) in my latest SecurityWeek piece: https://www.darkreading.com/vulnerabilities---threats/20-questions-to-ask-during-a-real-(or-manufactured)-security-crisis/a/d-id/1335079.

Monday, July 1, 2019

Swimming Upstream: What the Salmon Run Teaches Us About Security

Does working in security sometimes feel like swimming upstream?  You're not alone if you think that.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/swimming-upstream-what-salmon-run-teaches-us-about-security.

Sunday, June 16, 2019

Sensory Overload: Filtering Out Cybersecurity's Noise

No organization can prioritize and mitigate hundreds of risks effectively. The secret lies in carefully filtering out the risks, policies, and processes that waste precious time and resources.  I discuss in my latest DarkReading piece: https://www.darkreading.com/threat-intelligence/sensory-overload-filtering-out-cybersecuritys-noise/a/d-id/1334907.

Thursday, June 13, 2019

Insecurity is good for security

How can insecurity bolster a security program?  Insecurity can help organizations continually learn and make changes.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/how-insecurity-can-bolster-your-security-program.