I’m serious. And actually, you’re right not to care about it. Let’s face it, it’s not like we’re building La Sagrada Familia or something that grandiose. While the idea is that if we do our job right, lots of people will benefit. It’s neigh-on impossible for anyone to come along 100+ years later and wander […]
How architecture can save your life…or get you killed
I’d originally planned to write a different email today, but in doing some quick research to make sure I wasn’t being loopy, I found something I wanted to share with you. The excerpt below is one of many recollections of Col. Francis Harold Potter, USAF, I ran across: === In 1957 I was flying B-52’s […]
Want some stinky ogre security? Are you sure about that?
One of the scenes in the original Shrek that I find rolling around my head on a semi-regular basis is where Donkey and Shrek are walking through the Sunflower fields, and Donkey’s trying to understand why Shrek would go fight the dragon and rescue a princess just to make someone happy. …I mean, he’s an […]
Head in the clouds…or somewhere else?
One thing that surprises me more than it probably should when I speak with people about their security programs is how much “The Cloud” freaks them out. And, after speaking with them for a while, it’s clear they should be worried. But their habitual response to that worry is…you guessed it: “We brought in vendor/solution/tool […]
How to make your own security luck
In response to a previous email, a reader raised the challenges of actually practicing proper security architecture in organizations where the title says “Enterprise Security Architect” and yet they expect you to “roll up your sleeves” and do everything from incident RCA to security strategy to organizing the company piss up. And he’s right: it […]
