Commentary
Commentary
Commentary
Quick Hits
Commentary
Commentary
Commentary
News
Commentary
CommentaryCommentaryCommentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
News
You nailed it. My whole vision to changing the playing field. If we segmented personal web-use (the highest risk activity) from business activity. And then we isolated or contained the personal use, the remaining business...
In reply to: Re: Workplace Data Privacy Vs. Security: The New Balance
Well said. What if a company just segmented their network traffic? You want to go on facebook? You want to check your personal email? Okay, BYOD and use this network and we will not provide you a firewall or monitor your...
In reply to: Re: Workplace Data Privacy Vs. Security: The New Balance
I hear you, and there is no doubt that in the US, with proper notice and consent, usually in the form of an Acceptable Use Policy (AUP), a company clearly has the right to monitor and control employee Internet use. There...
In reply to: Re: Workplace Data Privacy Vs. Security: The New Balance
I see how there are many issues with this in the workplace but a properly written acceptable use policy that clearly states all email sent from a company computer is sole property of that company should be expressed. I am...
In reply to: Workplace Data Privacy Vs. Security: The New Balance
Anthony, thanks for joining the conversation. Better still if you did it from work. I really liked how you highlighted the tip-toe problem. I see this at the Board and C-Suite level where on the one hand the leadership want...
In reply to: Re: Sensitivity make this difficult
This is always an area where people tend to tip-toe around due to its sensitivity and diverse differences between different corporations and culture. While security should be the main focus, studies have shown that...
In reply to: Sensitivity make this difficult
Another excellent question Marilyn, thank you. Gut feelings, or put another way, intuition, can certainly catalyze and inspire investigation and analysis. Not every feeling or intuition is going to lead in a...
In reply to: Re: Lowering the noise level -- gut feelings
Phrases like "this feels like it's less actionable" or "I think this is always a false positive" can be dangerous.
How do you quantify those "gut feelings." And is there no place for them in the SOC?
In reply to: Re: Lowering the noise level -- gut feelings
Communication is a critical skill for both CIOs and CSOs in dealing with top executives . But no less important, as Eric rightly points out in his blog, is for the CIO and CSO to talk to each other.
In reply to: Re: A Partnership Mentality
100% agree. I think that a major obstacle in Information Security is the inability of the security professional to communicate effectively. Managing upwards can be a daunting task in itself, and it isn't easy to draft messages...
In reply to: Re: A Partnership Mentality
Bottom line is there needs to be someone in the organization that understands security, can translate between technical and business language, and clearly articulate metric based risks to the executives. ...
In reply to: Re: A Partnership Mentality
Excellent question, Marilyn, and thank you. In my experience, organizations too often take an "all or nothing" approach to managing the noise level. For example, an organization may say "we get too many alerts...
In reply to: Re: Lowering the noise level
Tweet This
