20 Questions to Ask During a Real (or Manufactured) Security Crisis

There are important lessons to be learned from a crisis, even the ones that are more fiction than fact.  I discuss what questions to ask during a crisis (whether real or manufactured) in my latest SecurityWeek piece: https://www.darkreading.com/vulnerabilities---threats/20-questions-to-ask-during-a-real-(or-manufactured)-security-crisis/a/d-id/1335079.

Swimming Upstream: What the Salmon Run Teaches Us About Security

Does working in security sometimes feel like swimming upstream?  You're not alone if you think that.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/swimming-upstream-what-salmon-run-teaches-us-about-security.

Sensory Overload: Filtering Out Cybersecurity's Noise

No organization can prioritize and mitigate hundreds of risks effectively. The secret lies in carefully filtering out the risks, policies, and processes that waste precious time and resources.  I discuss in my latest DarkReading piece: https://www.darkreading.com/threat-intelligence/sensory-overload-filtering-out-cybersecuritys-noise/a/d-id/1334907.

Insecurity is good for security

How can insecurity bolster a security program?  Insecurity can help organizations continually learn and make changes.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/how-insecurity-can-bolster-your-security-program.

Technology still isn't our problem

It's great to be back on the enterprise side of security after a few years on the vendor side.  Guess what?  Technology still isn't our problem in security.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/technology-not-our-problem.

How Crossword Puzzles Can Improve Your Information Security Posture

What could crossword puzzles possibly have to do with information security?  More than you might expect.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/how-crossword-puzzles-can-improve-your-information-security-posture.

The Fine Line of Feedback: 6 Tips for Talking to Security Pros

Feedback is a two-way street in terms of giving, receiving, and knowing how to give and receive.  I discuss in my latest DarkReading piece: https://www.darkreading.com/endpoint/the-fine-line-of-feedback-6-tips-for-talking-to-security-pros/a/d-id/1334596