Standards, technology, attack, verification. PCI DSS / 20 CSC, EMET, drive-by downloads and man-in-the-middle, red team testing. These and other lists of four, this morning in traffic.
Watch more videos on my YouTube channel.
Archive for September, 2015
Stuck in Traffic – Feedback Loops
Posted byReal traffic. Real feedback. Let’s use positive and negative feedback loops to drive secure behavior. For real.
Watch more videos on my YouTube channel.
Stuck in Traffic – Hard Costs for Incidents
Posted byBuy/Sells, ASNs, and other business processes that lead to financial penalties. Things to consider when costing out a security incident.
Watch more videos on my YouTube channel.
Stuck in Traffic – Converting EOL to Exercises
Posted byOSes hit end of life. Patching becomes prohibitively expensive. So organizations switch to host-based integrity. Now what if we were to convert this into security exercises? Presto chango. Business case for red teaming.
Watch more videos on my YouTube channel.
Stuck in Traffic – Philosophy of Network Diagrams
Posted byMistaking your diagram for your network? Finding out in a breach is bad. Finding out in a penetration test is a bit better. Security exercises? Decent. But the best approach is automatically checking the security assumptions.
Watch more videos on my YouTube channel.
Stuck in Traffic – Service Desk and Social Engineering
Posted byWe can’t trust the coffee shop to get the order right. We can’t trust the service desk to not fall for social engineering. So, give up? Or put in place processes to help?
Watch more videos on my YouTube channel.
Stuck in Traffic – Ownership is not a Control
Posted byFrom Bring Your Own Device to Cloud Computing, ownership is not a control. The first thing in BYOD? Letting go of fear. The second thing? Coffee, probably.
Watch more videos on my YouTube channel.
Stuck in Traffic – ERP Sandcastles
Posted byEvening edition. A handful of ways ERP security goes sideways and a fistful of sand for building better castles.
Watch more videos on my YouTube channel.
Stuck in Traffic – Rituals and Culture
Posted byBack to school has its own rituals and rhythms. So does corporate IT. Each becomes an opportunity to build and reinforce culture.
Watch more videos on my YouTube channel.
Friday Books and Talks 09/04/2015
Posted byThe Talent Powered Organization
by Robert Thomas, Peter Cheese, Elizabeth Craig
The key to strategic success is talent –– an organization’s people, from its current and future leaders to its frontline employees. But today, talent is harder to find and nurture, and easier to waste and lose. This has caused talent to move quickly to the top of every leader’s strategic agenda, but few organizations are managing their talent strategically. Combining strategic insight with proven and practical methods, The Talent Powered Organization is essential for people at all levels in any organization.