Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
CommentaryCommentaryCommentary
Commentary
CommentaryCommentary
Commentary
Commentary
Commentary
Good point, Thanks. I've heard that voiced as a "poor practice" with enterprises deaiing with BYOD... a precursor of what is coming with IoT.
In reply to: Re: What not to learn from the military
One good lesson to learn (that is, what we should not do) comes from the poor practice of bringing multiple sources of information back to a centralized repository, particularly one that does not have data element...
In reply to: Re: What not to learn from the military
Good blog, Michael. Thanks for your insight. Curious to know what you think is the one thing that InfoSec can learn from the military about what NOT to do with the IoT.
In reply to: What not to learn from the military
Interesting, companies should do a penetration test like www.stockpairitalia.com
In reply to: Interesting
While I agree having everyone accountable is an ideal situation I would still argue the importance of having clear leadership. We must have clear direction and motivation from leadership to be successful. That...
In reply to: Re: Compliance != Security
@Dr.T. At the end of the day, the shift has to come at the upper levels: That is the CEO and Board of Directors have to understand that strong security a critical cost of doing business without which the business will become...
In reply to: Re: Security as an Investment
It is because a more integrated world simply means more threats. Also we have been experiencing major breaches that touch consumers directly such as Target case.
In reply to: Re: if there's a silver lining...
That is one aspect of security we tend to get lost in my view. It does not really matter who needs to report where, it is actually everybody should be reporting to everyone by keeping everybody accountable on everything...
In reply to: Re: Compliance != Security
I agree with the article, we need to consider security as an investment. IT as a whole is always associated with the cost but without IT nothing can get done in today's world. The same for security, it may be way...
In reply to: Security as an Investment
In my opinion the ideal organization setup for a companies information security department would be setup this way. The CSO would report directly to the CEO and keep him well informed of the high level threats to the...
In reply to: Re: Compliance != Security
Good point, @Robert McDougal. So in our survey responses, I'm guessing the Org Chart 'checkbox' in this case might lead to Chief of risk / compliance.
In reply to: Re: Compliance != Security
I totally agree, @Robert. I found the comparison to epidemiology very original and apt with respect to cybersecurity. There has always been a lot of talk about proper security hygiene but using the public health model as...
In reply to: Re: Blueprint for fighting cyber infections
Tweet This
