Nov 10, 20191 minShrines of Failure I was at an event recently where one participant talked passionately about a disaster they had that they have since preserved artifacts...
Oct 26, 20191 minCareer Longevity & "The Don't Fire Me Chart"To fix anything sustainably requires long term action. This is especially true in technology risk and cybersecurity. The trouble is this...
Oct 5, 20192 minThe Stress and Joy of Security JobsA few months ago there was this whole thing about the stress of security roles, CISOs self-medicating, and a whole range of burn-out...
Sep 15, 20193 minSecurity Program TacticsWhen starting or reinvigorating a security program, focus on a small number of meta-objectives that can have sustained outsize effects -...