Commentary
Commentary
Commentary
Quick Hits
Commentary
Commentary
Commentary
News
Commentary
CommentaryCommentaryCommentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
News
I see how there are many issues with this in the workplace but a properly written acceptable use policy that clearly states all email sent from a company computer is sole property of that company should be expressed. I am...
In reply to: Workplace Data Privacy Vs. Security: The New Balance
Anthony, thanks for joining the conversation. Better still if you did it from work. I really liked how you highlighted the tip-toe problem. I see this at the Board and C-Suite level where on the one hand the leadership want...
In reply to: Re: Sensitivity make this difficult
This is always an area where people tend to tip-toe around due to its sensitivity and diverse differences between different corporations and culture. While security should be the main focus, studies have shown that...
In reply to: Sensitivity make this difficult
Another excellent question Marilyn, thank you. Gut feelings, or put another way, intuition, can certainly catalyze and inspire investigation and analysis. Not every feeling or intuition is going to lead in a...
In reply to: Re: Lowering the noise level -- gut feelings
Phrases like "this feels like it's less actionable" or "I think this is always a false positive" can be dangerous.
How do you quantify those "gut feelings." And is there no place for them in the SOC?
In reply to: Re: Lowering the noise level -- gut feelings
Communication is a critical skill for both CIOs and CSOs in dealing with top executives . But no less important, as Eric rightly points out in his blog, is for the CIO and CSO to talk to each other.
In reply to: Re: A Partnership Mentality
100% agree. I think that a major obstacle in Information Security is the inability of the security professional to communicate effectively. Managing upwards can be a daunting task in itself, and it isn't easy to draft messages...
In reply to: Re: A Partnership Mentality
Bottom line is there needs to be someone in the organization that understands security, can translate between technical and business language, and clearly articulate metric based risks to the executives. ...
In reply to: Re: A Partnership Mentality
Excellent question, Marilyn, and thank you. In my experience, organizations too often take an "all or nothing" approach to managing the noise level. For example, an organization may say "we get too many alerts...
In reply to: Re: Lowering the noise level
IT and IS are related but also separate areas of focus. I believe we are past the critical juncture where IT and IS diverge. It is just a matter of time before the remaining organizations adapt to this reality. Unfortunately,...
In reply to: Re: A Partnership Mentality
Tweet This
