Protecting the Republican National Convention – My Reflections
As the 2016 Republican and Democratic National Conventions are about to begin, Security Current has challenged me to reflect on an assignment I was given when I was an IT…
DetailsHackers Are Not Afraid of Frameworks – Part 2
Read Part One All Infrastructure and the NIST Framework. In this series I will take a close look at the Framework for Improving Critical Infrastructure Cybersecurity which NIST first published in…
DetailsGoing Down the Slippery Slope
One of the most useful things to me in trying to secure an enterprise like Columbia University is information, and the more information, the better. This means that for most…
DetailsBrexit’s Potential Impact on Information Security
One of the lessons of crisis management is that you don’t make predictions during a crisis. Not to say that the recent UK vote to leave the EU (“Brexit”) is…
DetailsThe Evolution of Analytics in Cybersecurity
Although information systems logs have been around since the early mainframe days, the concept of collecting and analyzing logs for security purposes is still a relatively new concept. From my…
DetailsVirginia Court Kills Privacy
A federal court in Virginia on June 23 may have put the final stake in the heart of constitutionally protected privacy rights online. The case itself was simple enough –…
DetailsThe Business of Security
More and more devices are being Internet-enabled daily. To securely drive an organization’s digital strategy, CISOs need to better understand business and new technologies across groups within the enterprise. It…
DetailsAll Infrastructure and the NIST Framework
Each infrastructure is critical to someone. Go ahead: ask a CIO if they are in charge of something other than “critical infrastructure” and see what they say. In fact, the…
DetailsEvaluating the Container Security Marketplace
It has been just over three years since initial release of Docker (1.0 was released in March 2013) and adoption rates are striking – or potentially alarming depending on your organization’s…
DetailsSecurity: It’s Not the Speed that Kills
My friend Randy Marchany tweeted a link to an article “Millennials Value Speed Over Security, Says Survey” that started me thinking about the apparent conflict between speed and security. If…
Details