One of the other big problems I see when I’m working with clients and customers that’s a lack of discipline with how they structure their risk assessments. They’re all over the place, and they smack of all the problems we talk about during the SABSA Foundation course: They’re highly subjective They vary greatly in structure […]
Who’s afraid of Security Ghosts and Ghouls?
In my inbox this morning was from a fellow email subscriber and buyer of the upcoming Definitive Guide to The Agile Security System™ where he was talking about experiencing first hand the value of using SABSA attributes tailored to your stakeholders. However, he also mentioned the quite common challenge of getting people to listen to […]
When to ignore Teddy Roosevelt
I have to admit I have a lot of respect for Teddy Roosevelt and many of the things he did and said. In fact, I have his “arena” quote printed out and stuck to the wall above my desk. One of his other famous quotes is this one: “In any moment of decision, the best […]
A security architecture lesson from 19th century midwestern housewives
Yesterday, I was having a variation of a conversation that I’ve had with loads of security leaders and architects in various parts of the world over the years, and it’s a conversation that centers around how to “find the time” to be more strategic in your security architecture efforts. There’s a couple of things at […]
Don’t be the hungry security puppy
Have you ever been really focused on something, and no matter what you did, you didn’t seem to get any closer to it? I mean, damn it! It’s right…there. But I can’t get it. I mean, I want it. I know I want it, but…nope. Maybe if I just tried this… This scene was pretty-much […]
