Tag Archives: security

What Is A Good Security Program?

What distinguishes a good security program? One of the hardest questions to answer in the Information Security field is whether our security program is good, or not. It’s a question we want to answer for many reasons, not least of … Continue reading

Posted in InfoSec, Penetration Testing, Risk Management, Security, Vulnerability Management | Tagged , , , , , | Leave a comment

Blaming the Victim for the Crime

Putting the victim on trial. Decades ago we learned to stop putting victims of sexual abuse, domestic violence and rape “on trial”. Well, mostly anyhow. But we, mostly, stopped blaming the girl because she wore a short skirt or went … Continue reading

Posted in General | Tagged , , , , , , , | Leave a comment

You Can’t Defend Without Intelligence

Imagine you are an Army General. And you have been given responsibility to defend a town that is the key to the local road network. You have a specific set of units under your command and several days to prepare … Continue reading

Posted in InfoSec, Security | Tagged , , , , , | 3 Comments

2013: A Roller Coaster

Or, as my wife put it, Random Ramblings of a Security Executive. Yes, it’s that time. Writing a blog post to wrap up the year, just all the rest of you do. I decided I’d cover my personal and professional … Continue reading

Posted in Career, Government, InfoSec, Life and Times, Security | Tagged , , , , , , , , , | 2 Comments

Day 3 at CORE

Yet another day of fun at CORE today. Spent the day getting to know the people, figuring out critical strategies, and places where I can start inserting myself to have some immediate impact. Started working on goals for the next … Continue reading

Posted in CyberWar, FUD, General, InfoSec, Life and Times | Tagged , , , , , , , | Leave a comment

Gartner Security Summit Keynote

Paul Proctor got on stage and captured the attention of 2400 security professionals. He lampooned the NSA, brought the ghosts of security on stage and even highlighted my organization for the changes we’ve been able to accomplish. Key themes: BYOD, … Continue reading

Posted in BYOD, FUD, InfoSec, Security | Tagged , , , , , | Leave a comment

CITE 2013 Presentation on Mobility, BYOD, etc.

My presentation at the 2013 CITE Conference & Expo. If you didn’t know before this, now you do. I am a heretic when it comes to cloud, consumer devices, BYOD and …. well many things. I am reasonably sure on … Continue reading

Posted in BYOD, Cloud, Consumer Devices, Mobility, Security, Technology | Tagged , , , , , , , , | Leave a comment