The Anthem Hack – Part Deux – What Anthem Did Right (and Wrong)
In the wake of every hack (and every second and one yard in the Super Bowl) there is a stream of criticism from Monday morning quarterbacks about what should have been done. …
DetailsAnthem Blue Cross – The Five Stages of Hack Response
This week it was Anthem Blue Cross’s time. The health insurance giant disclosed a massive hack, which compromised records for as many as 80 million people. This included identity information,…
DetailsThe Wisdom of the CISO Crowd…In an Era of Security Products and Technologies DELUGE
The list of security products and technologies resulting from searches by even the least sophisticated Internet Search Engines across any of the major security product categories can be quite overwhelming.…
DetailsThe CISO’s Guide to Getting Stuff Done
Let’s face it. You know what you have to do. You have a 30-day plan. A 90-day plan. A one-year plan. A five-year plan. You have spreadsheets, budgets, and PowerPoints.…
DetailsCrowdsourcing Invasions of Privacy
The Wall Street Journal recently reported that the United States government is creating a massive database of records culled from license plate scanners, and making this database available to law enforcement…
DetailsMy Security Fantasy
My biggest security problems all start with authentication. If you look at the major hacks that have taken place in the last year, you can trace most of them back…
DetailsWhat Keeps CISO’s Up At Night
Every CISO is one data breach from being fired. Or one disruptive DDoS attack. Or one theft of information. Or one bad audit result. Or one compliance investigation. Or one…
DetailsRisk Based vs. Rule Based
I have always found that information security professionals tend to fall into three categories: SWAT Teams, Power Rangers or Nerds with an edge (see a blog post of that name…
DetailsBusiness Continuity Planning, The CISOs Secret Weapon
BCP. Three little letters that, unfortunately, strike mind-numbing boredom into most CIOS’s. The truth is, Business Continuity Planning isn’t synonymous with the excitement that is typically found in the Information…
DetailsIn the Year 2525 – HoloLens, Google Glass and the Future of Privacy
In privacy and security circles, we typically think about threats and trends in the order of months or even years. We tend to forget that we are still very much…
Details