I wanted to blast an assumption about your kids’ ability to manage their own security My kids have been told since they were tiny what it’s ok, and not ok, to do […]
Practical InfoSec & Privacy * FUD fighting * Straddling security and data protection * Calling on IT, ITSec, InfoSec, and GRC experience to reduce data related harm * Blogging about helpful stuff for companies and the general public
Part of the Infospectives Diary Of An InfoSec Kid series. Originally written about the Kiddicare hack, but now 117 Million LinkedIn usernames and passwords have been found for sale on the darknet […]
The first post called out fairly damning findings about the state of vendor security governance at most firms, and looked at the criticality of: Early engagement Doing triage Clarity about vendor selection […]
Who is viewed as formal owner of your cybersecurity risks? A poll for anyone in any organisation. This isn’t asking who should be risk owner, it’s asking who the majority of staff think owns these risks. […]
Does your #SupplyChain #Cybersecurity #RiskManagement reflect your security dependence on 3rd parties?
Out with the old and in with the new. Musing on a personal and #InfoSec transformation