Category Archives: Uncategorized

So there are a lot of ways to die. Like a lot. We worry about obscure ways to die. Its gruesome really, to die via an asteroid or “space junk” strike (so much so that we make TV shows about it), hockey puck death, or obscure elevator amputations. …sort of like the various ways thatContinue reading “Frequency Matters”

My @ISACA column was published today. Read it here.

I live in a fairly straightforward world, I guess. I’m often accused of being naive but I’d argue I feel enlightened. Put bluntly, I think risk is always about money. This has to do with my education from Douglas Hubbard. When I hear nebulous problems I know that I can use the methods of EnricoContinue reading “It’s always about the money”

I wrote about this last May, namely that so-called cyberwar events are not for the domain of the private sector to defend against. I made an argument that cyberwar perpetrators are in the upper percentiles of attackers (95% +) and that outside of building our organization’s control strength up to that level, let’s just leaveContinue reading “Private Sector Cyberwar – part 2”