May 217 minDefense in DepthDefense in depth is a well accepted security principle. Intuitively, it stipulates there should be multiple lines of controls so as to...
May 89 minRegulatory RelationshipsFor some reason there have been a few people already in or moving into highly regulated industries, like finance or healthcare, that have...
Apr 213 minThe Stress and Joy of Security Jobs - UpdatedThere’s a lot going on in the world from conflict, crime, economic and many other pressures. Many of these matters have security...
Apr 99 min10 Fundamental (but really hard) Security Metrics As an industry we have been trying to deal with the issue of security metrics for a long time. I’ve written about this here, and in the...
Mar 267 minResilience is about Capabilities not Plans - UpdatedOver the past 2 years, since I wrote the first version of this post, we’ve had a lot of opportunity to test our collective resilience....
Mar 129 minHuman ErrorHuman error is not an explanation, rather it is something to be explained. In analyzing and learning from incidents, not just security...
Feb 264 minControls - UpdatedI wrote the first version of this post nearly 3 years ago. It is interesting that since then much of it remains true. Oddly, it also...
Feb 1218 minOrganizational PoliticsAt every stage in your career and in every part of your role you are going to have to deal with organizational politics. By this, I don’t...
Jan 2916 minSecrets of Successful Security Programs - Part 2As introduced in the last post, a successful security program is made up of two distinct elements: A series of episodic big bets that...
Jan 1511 minSecrets of Successful Security Programs - Part 1A successful security program (although I imagine this advice could apply to any discipline) is made up of two distinct elements: A...
Jan 17 minThe Obvious CISO : Don’t Overlook the SimpleThere is a great little book I read recently, “Obvious Adams - The Story of a Successful Businessman", it’s available on Amazon, but it’s...
Dec 18, 20213 minRisk Megatrends - UpdatedMegatrends are long-term, large-scale forces that shape the world around us. They are the driving forces that have tactical consequences...