How to Get Everyone Attuned to Cybersecurity: Ways to Raise Security Awareness
Posted on: 10 Apr 2018
Your organization’s security stance must be supported by everyone in the company, every day, in all that they do. However, people are focused on their jobs, not necessarily on security.…
Demote the CISO
Posted on: 13 Dec 2017
For the third straight year, Drs. Daniel Solove and Paul Schwartz held their Privacy and Security Forum at George Washington University Law School. For the third straight year I attended…
Rhymes with CISO
Posted on: 06 Sep 2017
In my 10+ years as a CISO, I’ve noticed a trend that appears to only be increasing. What I have observed is a proliferation of job titles that rhyme with CISO.…
What Is at the Center?
Posted on: 10 Jul 2017
I have gone back and forth for a long time. Should security be risk-centric or data-centric. Outside of security professionals, you sometimes meet people who believe security should be compliance-centric…
Patch Yours
Posted on: 04 Jul 2017
CISO Security professionals feel no great joy in being right about patching. The past two months have been a period of “I told you so” moments for anyone who has…
NIST Cybersecurity Framework, Beyond Version 1.0 – Part 3
Posted on: 24 Jan 2017
In this series I take a close look at the Framework for Improving Critical Infrastructure Cybersecurity which NIST first published in February of 2014. Read Part One ‘All Infrastructure and the…
Hackers Are Not Afraid of Frameworks – Part 2
Posted on: 11 Jul 2016
Read Part One All Infrastructure and the NIST Framework. In this series I will take a close look at the Framework for Improving Critical Infrastructure Cybersecurity which NIST first published in…
All Infrastructure and the NIST Framework
Posted on: 15 Jun 2016
Each infrastructure is critical to someone. Go ahead: ask a CIO if they are in charge of something other than “critical infrastructure” and see what they say. In fact, the…
What Would Harold Do?
Posted on: 29 Mar 2016
I tell users all the time “Forget everything you learned in Kindergarten.” It always gets a laugh, gets their attention and gets my point across. It’s not nice to share…
The Sanders-Clinton Data Brouhaha: It is Not About Privacy and All About Identity
Posted on: 11 Jan 2016
In August of 2010, Huping Zhou who had served as a researcher at the UCLA School of Medicine and had since been terminated, was sentenced to jail time for inappropriately…