A clear-eyed look at APT
Security is occasionally susceptible to two afflictions: 1. Hype. 2. Semantic arguments.
Derek Slater | 13 Mar | Read more
Security is occasionally susceptible to two afflictions: 1. Hype. 2. Semantic arguments.
Derek Slater | 13 Mar | Read more
Now that everything's networked and process control systems are easy to hack, here's a quick-reference guide to figuring out who's behind each type of security incident.
Derek Slater | 12 Nov | Read more
<strong>1. Barbican</strong>
Derek Slater | 27 Sep | Read more
1. Asking for a 10 percent budget increase in the next fiscal year:
Derek Slater | 26 Aug | Read more
More budget? Perhaps a little. More attention from senior management? Yes, a bit. Better results? That's not so clear.
Derek Slater | 18 Aug | Read more
In June of 2003, we ran a <a href="http://www.csoonline.com/article/218166/all-over-the-map">long article about organizational structures</a>. We titled it "All Over the Map," which pretty much tells you what we concluded about how security was handled at the time: a bit like a ship with no home port, passing from executive to executive. The article had examples of security variously reporting to Human Resources, Facilities, Operations, Legal, and IT. Responsibility without authority was a theme.
Derek Slater | 23 Jun | Read more
Let's say your organization doesn't have a formal enterprise risk management program. If you're at a big company, ERM might seem daunting because of silos, inertia and so on.
Derek Slater | 09 Sep | Read more
Let's say your organization doesn't have a formal enterprise risk management program. If you're at a big company, ERM might seem daunting because of silos, inertia and so on.
Derek Slater | 08 Sep | Read more
Security is very old in most respects, yet very young in others. As a corporate discipline, security unfortunately languished for years in the basement.
Derek Slater | 29 Jun | Read more
One of the reasons security is fun and interesting is that it requires a constant upgrade of your skills and knowledge.
Derek Slater | 03 Jul | Read more
What risks do employees face in a sour global economy? What countries pose a growing threat of kidnapping for ransom? Is Columbia safer than Mexico? Insights from a former FBI hostage negotiator.
Derek Slater | 27 Nov | Read more
Dilip Sarangan tracks physical security companies for Frost & Sullivan. He expects the industry's "need to have" products to weather the economic storm well, with the big players (now including IBM and Cisco) looking for value-priced acquisitions.
Derek Slater | 20 Nov | Read more
From configuring the hardware to connecting all the stovepipes, security executives need to tune up both for light jabs and roundhouse rights. <I>CSO</I> talks defensive strategy with Bill Boni, CISO of Motorola, and Ira Winkler, chief security strategist for Hewlett-Packard.
Derek Slater | 09 Oct | Read more
Thornton May says CSOs couldn't sell water to a man on fire. How can they get the hang of security marketing?
Derek Slater | 12 Jun | Read more