1. Welcome
Welcome to one of my internet tenancies. Here you’ll find me musing about risks and opportunities relating to information security, information assurance and IT security management.
Can You Rely On Your Supplier To Be Tran...
I’ve been helping a client understand the risk to their business as a result of the Symantec source code’s unauthorised disclosure. As expected we covered the loss of Symantec’s products integrity and...
The Most Important Skill to the Successf...
Many years ago I was involved in a discussion with a partner in a global legal practise. At the time I was explaining my thoughts on the future relationship between the law and information and IT security....How Far Should Your Risk Assessment Go?
The recent Symantec source code incident brought to mind a challenge which I face in my work day to day. How far do you analyse risk or more importantly the scenarios where risk can be found? Symantec are,...
Urban Operating Systems: How Should You ...
Every now and then I read something that makes me think “Wow”. The recent BBC News report of an operating system being developed and trialled which effectively runs a large part of our living environment...
Information Security Breach causes Bank ...
UBS’s CEO resigned yesterday following a failure of the banks management of risk resulting in a £1.5 billion loss. Trader, Kweku Adoboli, was able to combine his knowledge, as originally a back office...
Sony Playstation Customers Requested To ...
Earlier this year Sony, the owners of Playstation, and 77 million users of it’s Playstation 3 network suffered a breach of system and information security. Whilst 77 million users had their personal...About Me
I have spent nearly all of my career in information security, information assurance & IT security management seeing the executive management challenge as being a balancing act between negative risks to an organisations strategic and operational objectives and the cost of managing these through appropriate internal controls.
Find Me
Tags
Business Continuity
Cloud security
Confidentiality
Critical National Infrastructure
Cyber Espionage
cyber warfare
data protection
Economics of information security
enforcement
ENISA
foreign policy tool
Future
human vulnerability management
Incident Management
Information assurance
Information security
Information security controls
information security insights
Information Security Risk
information security ROI
information security skills
Integrity
internal control framework
ISO27001
IT Security
IT security skills
National policy
Privacy
Resilience testing
Secure software development
security awareness
Supply Chain Management
The Perception Gap
third party risk management
virtual information security
