Add a page title

All Posts
Leadership
Risk
Cybersecurity
Technology

Feb 27
3 min

"Hell Yes, or No" vs. "Soft Yes, and Fast Quit"

I am a big fan of the concept of saying, “Hell Yes, or No” to decide whether to do something or not. Derek Sivers has written well about...

2,141 views

Jan 30
5 min

Research Challenges in Info/Cybersecurity - Part 1: “Silicon"

This is the first of a two part post on research challenges centered on systems, computer science and engineering research challenges....

818 views

Dec 19, 2020
5 min

Privilege Management Program - Governance

I can’t recall having seen an overview of a systematized privilege management program. There are lots of great articles on specific...

1,385 views

Nov 22, 2020
5 min

Scenario Planning - The Best Technique You Might Not Be Using

Scenario planning is one of the most underutilized techniques in security. Which is surprising given how effective it is in [good]...

1,324 views

Oct 13, 2020
2 min

Vulnerability Management - Updated

It still surprises me that much of the tone of vulnerability management is about patch/bug fix vs. detecting broader configuration and...

1,332 views

Sep 20, 2020
3 min

The Rising Tide and the Case for Security Optimism

Continuing with the theme of raising the baseline by reducing the cost of control we can see the next logical progression is that the...

719 views

Sep 6, 2020
3 min

Taking Inventories to the Next Level - Reconciliation and Triangulation

We know it is important to have good inventories across all of the assets we care about in an enterprise. For security purposes this is,...

694 views

May 17, 2020
3 min

Crypto isn’t the Only Cyber Issue in a Post Quantum World

Let’s assume general purpose quantum computers that can operate usefully at scale are coming. I think a reasonable timeframe is 15 years....

504 views

May 9, 2020
2 min

Think Twice Before Switching Off Controls : Chesterton's Fence

Chesterton's Fence is a cautionary tale to make sure that before you change things you actually understand their purpose. This is...

381 views

Feb 2, 2020
5 min

Dealing with the Deluge of Vendors

Everyone is deluged with approaches from product and service vendors, small and large. Even vendors struggle to keep track of who their...

1,404 views

Jan 20, 2020
4 min

Operational Resilience

The Bank of England has recently released a sequence of consultation papers, after an earlier discussion paper, laying out a framework...

2,039 views

Jan 1, 2020
3 min

Predictions and Calls to Action

It’s that time of year for all the predictions of what to expect for the next year, and now - the next decade. I’m generally not a fan of...

92 views

Nov 10, 2019
1 min

Shrines of Failure

I was at an event recently where one participant talked passionately about a disaster they had that they have since preserved artifacts...

598 views

Sep 1, 2019
2 min

Vulnerability Management

I don’t see much written on vulnerability management in more holistic terms vs. patch/bug fixing. This might be ok given a lot of...

91 views

May 24, 2019
1 min

Coding Skills and Security

I've increasingly found, with respect to coding, security has come full circle. Those of us who started in the 80's/90's had to code (or...

403 views

Feb 12, 2019
2 min

Technology - Retrospective

In the late 1980’s I was a developer using virtualized systems and containers, software defined networks, thin-client end points that...

242 views

{"items":["603a81e6ea326b001733c4c0","601568d7676ddc0018d00c5d","5fde3b49defdb400173732f3","5fba5bcf4747e300177baab6","5f85bd1a4c308a0017ff938b","5f67661e3e18dc00178610f1","5f5508fe938ac80018391a6e","5ec15569ce1586001707acf6","5eb720c6d51cdd00170dacb0","5e36d8ad63074c0017317b6c","5e245439d3c7ba005167af4d","5e0fad6f39b6380017c4939c","5e0fba90cd0005001763ac35","5e2405d00d66dc003c1c67aa","5e240a9637364c00345b6be4","5e240c06bff73e0017b4cb98"],"styles":{"galleryType":"Columns","groupSize":1,"showArrows":true,"cubeImages":true,"cubeType":"fill","cubeRatio":1.3333333333333333,"isVertical":true,"gallerySize":30,"collageAmount":0,"collageDensity":0,"groupTypes":"1","oneRow":false,"imageMargin":32,"galleryMargin":0,"scatter":0,"rotatingScatter":"","chooseBestGroup":true,"smartCrop":false,"hasThumbnails":false,"enableScroll":true,"isGrid":true,"isSlider":false,"isColumns":false,"isSlideshow":false,"cropOnlyFill":false,"fixedColumns":1,"enableInfiniteScroll":true,"isRTL":false,"minItemSize":50,"rotatingGroupTypes":"","rotatingCropRatios":"","columnWidths":"","gallerySliderImageRatio":1.7777777777777777,"numberOfImagesPerRow":1,"numberOfImagesPerCol":1,"groupsPerStrip":0,"borderRadius":0,"boxShadow":0,"gridStyle":1,"mobilePanorama":false,"placeGroupsLtr":true,"viewMode":"preview","thumbnailSpacings":4,"galleryThumbnailsAlignment":"bottom","isMasonry":false,"isAutoSlideshow":false,"slideshowLoop":false,"autoSlideshowInterval":4,"bottomInfoHeight":0,"titlePlacement":"SHOW_ON_THE_RIGHT","galleryTextAlign":"center","scrollSnap":false,"itemClick":"nothing","fullscreen":true,"videoPlay":"hover","scrollAnimation":"NO_EFFECT","slideAnimation":"SCROLL","scrollDirection":0,"scrollDuration":400,"overlayAnimation":"FADE_IN","arrowsPosition":0,"arrowsSize":23,"watermarkOpacity":40,"watermarkSize":40,"useWatermark":true,"watermarkDock":{"top":"auto","left":"auto","right":0,"bottom":0,"transform":"translate3d(0,0,0)"},"loadMoreAmount":"all","defaultShowInfoExpand":1,"allowLinkExpand":true,"expandInfoPosition":0,"allowFullscreenExpand":true,"fullscreenLoop":false,"galleryAlignExpand":"left","addToCartBorderWidth":1,"addToCartButtonText":"","slideshowInfoSize":200,"playButtonForAutoSlideShow":false,"allowSlideshowCounter":false,"hoveringBehaviour":"NEVER_SHOW","thumbnailSize":120,"magicLayoutSeed":1,"imageHoverAnimation":"NO_EFFECT","imagePlacementAnimation":"NO_EFFECT","calculateTextBoxWidthMode":"PERCENT","textBoxHeight":0,"textBoxWidth":200,"textBoxWidthPercent":50,"textImageSpace":10,"textBoxBorderRadius":0,"textBoxBorderWidth":0,"loadMoreButtonText":"","loadMoreButtonBorderWidth":1,"loadMoreButtonBorderRadius":0,"imageInfoType":"ATTACHED_BACKGROUND","itemBorderWidth":1,"itemBorderRadius":0,"itemEnableShadow":false,"itemShadowBlur":20,"itemShadowDirection":135,"itemShadowSize":10,"imageLoadingMode":"BLUR","expandAnimation":"NO_EFFECT","imageQuality":90,"usmToggle":false,"usm_a":0,"usm_r":0,"usm_t":0,"videoSound":false,"videoSpeed":"1","videoLoop":true,"jsonStyleParams":"","gallerySizeType":"px","gallerySizePx":940,"allowTitle":true,"allowContextMenu":true,"textsHorizontalPadding":-30,"itemBorderColor":{"themeName":"color_12","value":"rgba(243,243,243,0.75)"},"showVideoPlayButton":true,"galleryLayout":2,"targetItemSize":940,"selectedLayout":"2|bottom|1|fill|true|0|true","layoutsVersion":2,"selectedLayoutV2":2,"isSlideshowFont":false,"externalInfoHeight":0,"externalInfoWidth":0.5},"container":{"width":940,"galleryWidth":972,"galleryHeight":0,"scrollBase":0,"height":null}}

RISK & CYBERSECURITY

Thoughts from the Field