I participated in a CIO risk round table last year, I see the article is now online. Hat tip to Maverick for hosting yet another fun event.

One of the most crucial and overlooked areas in information security is intelligence gathering. Let’s face it the guys who do this well are ...

Chris Hoff recently made this observations in a post about offensive computing and he's right. This is akin to carrying a gun in the re...

Designing software that is secure is a difficult prospect at the best of times. Defenders need to know what(assets) they need to protect and...

When one thinks of securing information, practitioners will recite the standard CIA mantra. We need to protect information from confidential...

Recently a customer asked me where they should focus their security efforts, should they focus on vulnerabilities or threats? I responded by...