Category: Risk
Everything filed under Risk.
Davos 2020 World Economic Forum 2020 Global Risk Report Cyber Cliffs Notes
Each year the World Economic Forum releases their Global Risk Report around the time of the annual Davos conference. This year's report is out and below are notes on the "cyber" content to help others speed-read through those sections (in…
Data Driven Security Roundup: betaPERT, Shiny, Honeypots, Passwords & Reproducible Research
Jay Jacobs (@jayjacobs)—my co-author of the soon-to-be-released book Data-Driven Security—& I have been hard at work over at the book's sister-blog cranking out code to help security domain experts delve into the dark art of data…
Bahrain eGov Conference "Risk Reality" Slides
For those finding this post from the Bahrain eGov conference, I'd like to re-extend a hearty "Thank you!" for being one of most engaging, interactive and intelligent audiences I've ever experienced. I truly enjoyed talking with all of…
New SecurID Soft Token Cloning Weakness : What's The Risk?
I posted a link to Twitter earlier on a recent discovery of the ability to clone RSA SecurID soft…
Off By One : The Importance Of Fact Checking Breach Reports
I didn't read through the Massachusetts 2011 Report on Data Breach Notifications \[PDF\] until recently, but once I went through the report my brain kept telling me "something is wrong". Not something earth shattering, but more of a…
Is Your Organization Ready For a Risk Management Program?
While the slides will be officially available from SIRA web site in the not-too-distant future—complete with video (for all the talks)—I figured it wouldn't hurt to put them up here as…
Three Resolutions For Web Developers
I'm on a " three things " motif for 2012, as it's really difficult for most folks to focus on more than three core elements well. This is especially true for web developers as they have so much to contend with on a daily basis, whether it…
Predictions? Humbug! Resolve Is Where It's At
This is the time of year when pundits and armchair/amateur analysts make predictions for the coming year. Given that only a tiny fraction of them predicted the Sonage of 2011 (not Sony specifically or the level of pwnage) or the…
Why Didn't They Just…?
A while back I was engaged in a conversation on Twitter with @diami03 & @chriseng regarding (what I felt was) the need for someone to provide the perspective from within a medium-to-large enterprise, especially when there are so many folks…
Your New Mega Security Program
Everyone who can read this blog should remember the Deepwater Horizon spill that occurred in the Spring of 2010; huge loss of life (any loss is huge from my persective) and still unknown impact to the environment. This event was a wake-up…