Security and the Infinite Capacity to Rationalize

Better security begins with putting an end to rationalizing and replacing it with logic.  How so?  I discuss in my latest DarkReading piece: https://www.darkreading.com/threat-intelligence/security-and-the-infinite-capacity-to-rationalize-/a/d-id/1335400.

What does summer vacation have to do with information security?

What could summer vacation possibly have to do with security?  More than you might initially realize.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/what-does-summer-vacation-have-do-information-security.  Enjoy your summer.

20 Questions to Ask During a Real (or Manufactured) Security Crisis

There are important lessons to be learned from a crisis, even the ones that are more fiction than fact.  I discuss what questions to ask during a crisis (whether real or manufactured) in my latest SecurityWeek piece: https://www.darkreading.com/vulnerabilities---threats/20-questions-to-ask-during-a-real-(or-manufactured)-security-crisis/a/d-id/1335079.

Swimming Upstream: What the Salmon Run Teaches Us About Security

Does working in security sometimes feel like swimming upstream?  You're not alone if you think that.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/swimming-upstream-what-salmon-run-teaches-us-about-security.

Sensory Overload: Filtering Out Cybersecurity's Noise

No organization can prioritize and mitigate hundreds of risks effectively. The secret lies in carefully filtering out the risks, policies, and processes that waste precious time and resources.  I discuss in my latest DarkReading piece: https://www.darkreading.com/threat-intelligence/sensory-overload-filtering-out-cybersecuritys-noise/a/d-id/1334907.

Insecurity is good for security

How can insecurity bolster a security program?  Insecurity can help organizations continually learn and make changes.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/how-insecurity-can-bolster-your-security-program.

Technology still isn't our problem

It's great to be back on the enterprise side of security after a few years on the vendor side.  Guess what?  Technology still isn't our problem in security.  I discuss in my latest SecurityWeek piece: https://www.securityweek.com/technology-not-our-problem.