I wanted to blast an assumption about your kids’ ability to manage their own security My kids have been told since they were tiny what it’s ok, and not ok, to do […]
Part of the Infospectives Diary Of An InfoSec Kid series. Originally written about the Kiddicare hack, but now 117 Million LinkedIn usernames and passwords have been found for sale on the darknet […]
The first post called out fairly damning findings about the state of vendor security governance at most firms, and looked at the criticality of: Early engagement Doing triage Clarity about vendor selection […]
Who is viewed as formal owner of your cybersecurity risks? A poll for anyone in any organisation. This isn’t asking who should be risk owner, it’s asking who the majority of staff think owns these risks. […]
Does your #SupplyChain #Cybersecurity #RiskManagement reflect your security dependence on 3rd parties?
Out with the old and in with the new. Musing on a personal and #InfoSec transformation
Is this a valuable outing of a principle-free profit-obsessed security trade, careless stereotype reinforcement, something in between, or a harmless bit of #InfoSec name dropping?
Working out why handling of the upgrade made me so grumpy and how we hand over so much control to big vendors.