A CISO Checklist: How to Reduce the Silo Effect
As a CISO or an executive responsible for the Information Security organization at your company, one thing that you ought to keep in real focus is the Silo Effect. Be…
DetailsRisk Management: Accounting for Disruptive Security Change
We don’t really think about it this way most of the time, but disruption can happen in security just like any other activity in an enterprise. By this I mean,…
DetailsBehavioral Analytics, Intrusion Prevention and the Cloud: Insights from Black Hat 2015
Behavioral analytics. Cloud governance. Machine learning. At this year’s Black Hat USA 2015, these were just some of the terms that dominated the sessions and exhibit hall alike. For healthcare…
DetailsBreaking the Chain
By now most of us have heard of the phrase kill chain. For those of you that haven’t heard of it, the kill chain is a phase-based model used to…
DetailsWhy I look Forward to October
Life on a college campus changes in the Fall. In a way, just like the seasons, life in higher ed is very cyclical, and the beginning of the semester is…
DetailsThe Ever Evolving Role of the Chief Information Security Officer
Over the past few years, there has been an uptick in cybercrime on a mass scale, with hackers gaining access to personal information of millions of people. Breaches at well-known,…
DetailsIt’s Time to Put Common Sense into Security
A few weeks ago, my son and his family came to visit us from Japan (he is a Captain in the Marine Corps and stationed there). We took a day…
DetailsAn Open Letter to Security Vendors
So tell me – did you hear the news?? Apparently the rumors are indeed true. 2015 is the year of the Security Startup. And in the words of the greatest…
DetailsInside(r) Job
In 1981, R. Foster Winans was a reporter for the Wall Street Journal, writing the “Heard it on the Street” column. As a diligent reporter, he would find out information…
DetailsEncryption as Protection? Maybe Not
A recent espionage prosecution in West Palm Beach, Florida demonstrates that encryption may not be the panacea that organizations think it is. So rather than relying on encryption alone, companies…
Details