Focus on the Ends, Not the Means

Do the ends justify the means?  This two-thousand year old question can teach us a valuable information security lesson.  Curious what I might be referring to?  Have a look at my latest piece in SecurityWeek: http://www.securityweek.com/cyber-defenders-must-focus-ends-not-means.  Curated for you.

Searching for answers? Try listening.

I'm often amazed at how difficult many people find listening to be.  I'd argue that this impedes their growth and maturity, most acutely in the security field.  Curious what I'm getting at?  Have a look at my latest piece in SecurityWeek: http://www.securityweek.com/answer-right-front-you.  Hope you enjoy.

20 Endpoint Security Questions You Never Thought to Ask

As you're all aware by now, I love a good game of 20 questions.  This month's installment of the 20 questions series deals with endpoint.  My latest DarkReading piece discusses: http://www.darkreading.com/endpoint/20-endpoint-security-questions-you-never-thought-to-ask-/a/d-id/1327305?.  I think you'll find the piece useful, and perhaps interesting as well.

Collection, Sensing, and Alerting: Yesterday's News

Security has evolved to the point that I can now say that collection, sensing, and alerting are yesterday’s news. How can I make such a provocative statement? Wikipedia. Confused? That’s certainly understandable. I explain in my latest SecurityWeek piece: http://www.securityweek.com/collection-sensing-and-alerting-yesterdays-news.

Analytics is What's Next for Detection

Analytics, when done correctly, stands to be the next frontier for detection.  It's a logical evolution from signature-based and detonation-based detection.  Curious what I mean by that?  My latest piece in The Business Journals discusses: http://www.bizjournals.com/bizjournals/how-to/technology/2016/10/how-to-keep-pace-with-evolving-online-attackers.html.  I hope you find the piece thought provoking.

Want better security? Be a pragmatist.

What does being a pragmatist have to do with improving the security posture of an organization?  I discuss that exact question in my latest SecurityWeek piece: http://www.securityweek.com/want-better-security-be-pragmatist.  If you are a pragmatist, have you ever felt alone, or perhaps even ridiculed in the security world?  You are far from alone.  Have a look at the piece to see what I mean by that.

Anyone interested in another game of 20 questions?

It's time for another game of 20 questions.  The last installment was around analytics.  This time, we're exploring security-as-a-service offerings.  Interested in playing another game of 20 questions?  Have a look at my latest DarkReading piece on the topic: http://www.darkreading.com/vulnerabilities---threats/20-questions-to-explore-with-security-as-a-service-providers/a/d-id/1327101?.  Hope you enjoy.