The Risk Dr ®

  • Practicing Aikido with Type 1

    This isn’t cybersecurity related but I wanted to share anyways. I recently published a piece on the discipline required to practice Aikido when you have Type 1 Diabetes. It’s published here at the United States Aikido Federation (USAF) site.

    ·

  • Speaking at SIRAcon 2016

    My fall conference calendar keeps filling up! I’ll be a panelist at SIRAcon this year alongside Jim Hietala from the OpenGroup and a couple surprise guests on Thursday 13  Oct at 9:00 AM. We will be speaking on the Risk Analyst Profession: Training and Certification Requirements.

    ·

    , ,

  • Speaking at the Inaugural FAIR Conference

    I’ve got a busy October speaking calendar this year! I will be participating on a panel discussion at the inaugural FAIR Conference this year, as well as signing books with Jack Jones. Should be a fun time! Be sure and stop by to say hello!

    ·

    ,

  • Speaking at UNCC Cyber Security Summit

    I will be speaking this Wednesday, 5 Oct at the 2016 UNCC Cyber Security Summit. The last time I spoke there was 2013. I’m doing a hybrid joint-presentation/panel discussion with Chris Houser from Wells Fargo and the panel discussion will be moderated by Todd Innskeep from Booz Allen Hamilton. I will be talking about how…

    ·

    , ,

  • The Risk of Cyber Austerity

    Sometimes, the organization you work for will need to make budget cuts. And sometimes that means cuts to the security budget. How that should be handled is the subject of my latest @ISACA column.

    ·

    , ,

  • The “Goth Kids” of the IT Dept

    Recently, I was discussing faux names for the risk department with a colleague in Operational Risk. We were trying to come up with a good subheading that poked fun of our role in the organization. My suggestions tended towards the subversive (my favorite suggestion was “Risk: Hide All the Bowls Of Cheerios”). My humor belied…

    ·

  • The Dose Makes the Poison

    My latest @ISACA article posted today. I was really pleased with this one as it uses an easily understandable metaphor to call out the often experienced desire of people to live life without risk (as evidenced by statements such as “We don’t accept any risk…”). Take a look and let me know what you think.…

    ·

    , ,

  • RedZone Podcast about Risk Forecasting

    Bill Murphy‘s interview with me for his RedZone podcast was posted today. I had a great time talking with Bill about risk, FAIR, and forecasting. You can find the podcast here. It was a great discussion, and Bill was a very gracious host. His entire podcast series is worth subscribing to: he interviews some really…

    ·

    , , ,

  • Assessing Cyber Risk Quality pt. 3

    The final post of the interview/blog series I did with the FAIR Institute was posted last night.

    ·

    ,

  • Assessing Cyber Risk Quality pt. 2

    Part 2 of the interview/blog series I did with the FAIR Institute was posting this morning.  

    ·