Categories
- Economics and Risk (14)
- Highlights (348)
- Identity Management (103)
- Incidents (31)
- Metrics (75)
- Quotes (2)
- Random (19)
- Threat Management (125)
- Trust Management (16)
- Vulnerability Management (201)
Archives
I’m having a zen moment
"Security Experts Warn Firms of the Higher Risk of Lower-Risk Flaws"
Is it a paradox or something Confucius would say? I am going to meditate on it overnight and write something tomorrow.
Does it work? Washing your hands edition
This just in (sort of) from Slate.com (via Overcoming Bias):
How to Sell Germ Warfare
A Columbia University study also found no reduction in common infections among inner-city families given free antibacterial hand soap, detergent, and cleaning supplies. The same year, University of Michigan epidemiologist Allison Aiello summarized data on hand hygiene for the ...
Does it work? P.S.A. Prostate Cancer Tests Edition
This just in (sort of) from the New York Times:
The Great Prostate Mistake
EACH year some 30 million American men undergo testing for prostate-specific antigen, an enzyme made by the prostate. [...] The annual bill for P.S.A. screening is at least $3 billion, with much of it paid for by Medicare and the Veterans ...
Are you a “whore” or a “prude”?
I was talking to my friends Tony and Mike today at our local ISSA meeting and the subject of social networks came up. I was explaining that it makes me uncomfortable to get LinkedIn requests to get connected from people that I hardly know. My reasoning for this is that (I believe) there is an ...
Advanced Persistent Threat - a rose by any other name
It is a curious thing, watching and reading and listening to folks debate the Advanced Persistent Threat (APT). with all the brouhaha, I don't really believe there is a whole lot of difference in belief between the skeptics and the advocates. What is happening is simply the popularization of a term that has been around ...
Security Budget Planning in Three Easy Steps
Gunnar Peterson has a great post on security budgeting. His essential point is to apply a "flat tax" to all IT spending. The value is in its simplicity. We can get a lot more complex (and often do), but this is an excellent starting point.
Don't forget the business and don't forget we are "optimizing" our ...
RSA Conference 2010 - Ghost of Conference Past
I was talking with my buddy Ben Rothke tonight about the security graveyard - companies that are no longer with us (he's been a part of a number of them, but I'm not making any connections ;-). He also challenged me to find an old list of companies exhibiting at RSA. Herewith is a list ...
More Breach Costs “per record”
Ponemon Institute has issued its annual report on the cost of data breaches. I wrote last year about using per record costs for data breaches. An excerpt:
It is common when estimating costs of data breaches to quote costs "per record". Most recently, Ponemon Institute released a study that asserted a cost of $202 per record ...