The Disclaimer:
Just to be clear, nothing that I write here represents the position or opinion of my employer. Nothing I write here is proprietary or confidential to my employer. Everything I write here is my personal opinion.Pages
Subscribe to Security & Cigars
Follow me on Twitter
My Tweets-
Recent Posts
Archives
Recent Comments
- David Elfering on Back to Normal
- Terry Holberton on How To Get My Attention
- Vaughn Harring on Eric Update
- ecowper on Cigars
- Mike Childs on Cigars
Categories
- Alcohol
- Apple
- Being A Grown-Up
- Big Data
- Board Responsibilities
- BYOD
- Career
- Cigars
- Cloud
- Conferences
- Consumer Devices
- CyberWar
- Doing Adulting Right
- Food
- FUD
- General
- Government
- Health
- Home
- InfoSec
- Life and Times
- Military
- Mobility
- Pandemic
- Penetration Testing
- Please Advise
- Risk Management
- Security
- Smoking
- Teamwork
- Technology
- Travel
- Travel
- Uncategorized
- Vulnerability Management
Category Archives: Risk Management
Thinking About Reducing Risk
Wow, it’s been a long time since I’ve posted here. I’ve been kinda busy, tons of travel, sending a kid off to college, BlackHat and DefCon and DerbyCon, lots of engagement with customers around the idea of a mature vulnerability … Continue reading
Social Stuff:
Posted in Risk Management
Tagged Airlines, cyber-security, risk
Comments Off on Thinking About Reducing Risk
The Maturity Model … Matures
We are making good progress with the Vulnerability Management Maturity Model now. We have a very nice looking graphic that aligns activity across each stage of maturity. Next steps include demonstrating the business value of improving maturity, providing an assessment … Continue reading
Social Stuff:
Posted in InfoSec, Risk Management, Security, Vulnerability Management
Tagged maturity model
Comments Off on The Maturity Model … Matures
What Is A Good Security Program?
What distinguishes a good security program? One of the hardest questions to answer in the Information Security field is whether our security program is good, or not. It’s a question we want to answer for many reasons, not least of … Continue reading
Social Stuff:
Posted in InfoSec, Penetration Testing, Risk Management, Security, Vulnerability Management
Tagged APT, Gartner, Good Security, infosec, security, The Basics
Comments Off on What Is A Good Security Program?
Vulnerability Management Re-Visited
I know, boring topic. Just part of IT and Security operations. Nothing sexy here. It’s way more fun to think about how to beat those nasty, mean APT’s, how to detect malware actively on your network, how to do fancy … Continue reading
Social Stuff:
Posted in InfoSec, Risk Management, Security, Vulnerability Management
Tagged attack paths, ciso, Gartner, infosec, maturity model, TVM, vulnerability management
1 Comment
The Adobe Breach: Initial Lessons
Now that we’ve had a little time to absorb the impact of the Adobe breach, there’s a few lessons we can learn already. First, a link for those who have been living in a cave and don’t know what I … Continue reading
Social Stuff:
Posted in InfoSec, Risk Management, Security, Vulnerability Management
Tagged Adobe, Lessons Learned, Users, Vulnerability Insanity
20 Comments
Building CISO Relevance: Written For BitSight
BitSight is a very interesting security startup that is trying to do something we all have wanted for a long time. Their goal is to find ways to actually quantify risk in a measurable, objective way. If they achieve anything … Continue reading
Social Stuff:
Posted in Big Data, General, InfoSec, Risk Management
Tagged ciso, information security, relevance, risk
Comments Off on Building CISO Relevance: Written For BitSight