Satya Nadella's letter to employeesmentions cloud 7x more often than security. Microsoft CEO letter here Continue reading Twelve Word Tuesday: Looking for Security Tea Leaves in New Microsoft CEO's "Bold Ambition & Our Core" Missive
SANS Security Trend Line
Continuous vulnerability avoidance much more profitable than continuous monitoring/mitigation/incident response. Continue reading Twelve Word Tuesday: It Hurts When They Do That, Get Them to Not Do That
10
Jun 2014
Twelve Word Tuesday: Verizon 2014 DBIR Critical Security Controls Incident Prevention Heat Map
Vertical: Hotels need basic hygiene Horizontal: Patching and securing remote access dominate Figure 70 from 2014 Verizon Data Breach Investigation Report Continue reading Twelve Word Tuesday: Verizon 2014 DBIR Critical Security Controls Incident Prevention Heat Map
Bill Murray and I recently had an fun interchange on the topic of supply chain security and he's agreed to let me reproduce it here. The starting point was a comment I made in SANS Newsbites on this news item: [[60]] China Vetting Networking Gear (May 22, 2014) After the US Justice Department indicted five … Continue reading A Conversation Around Supply Chain Integrity - Is There Any Real Way to Trust Products?
03
Jun 2014
Twelve Word Tuesday: 25 Years After the End of the Last Cold War: Lessons Learned for a Cyber Version
Mutually Assured Destruction proved best defense tipped the balance - least vulnerable wins. Continue reading Twelve Word Tuesday: 25 Years After the End of the Last Cold War: Lessons Learned for a Cyber Version
