A couple of days ago, Mike Johnson, who was the former CISO of Lyft, started a thread on LinkedIn about bad cybersecurity advice that must die. His contribution to the thread was the oft espoused “don’t click links” mantra of many in our industry—including some people who I respect. I have to agree with him. […]
Discovering the secret sauce of the organizatiosaurus—can you do it?
My son is on a bit of a dinosaur kick over the last few days. First it was the Lego version of Jurassic World on Netflix, and tonight, the book he picked was an amusing story called Tyrannosaurus Drip, where a reed-eating little guy who looks somewhat like a Parasaurolophus accidentally gets raised by a […]
Are you still in the 74%?
According to some old research from Ponemon and F5 I recently rediscovered today, 74% of the respondents to a 2017 survey said that their security programs weren’t aligned with the objectives of the businesses they were trying to protect. And even today, I spoke to a very modern bank in the middle of a massive […]