One of the CISOs I follow on Twitter triumphantly tweeted (oohhhh….’lotta ‘literation there): “I think I managed to speak CEO effectively today.” And I think that’s great. It’s an achievement…and it’s also something that’s a bit like Steven Wright’s photo of Houdini locking his keys in his car—very rare. The question is, what are we […]
Avoiding the lava of stakeholder interviewing
Today was the “back to school” night for my son’s school, and one of the things we got to see was what they were doing in the new classroom, and in particular, the “identity board” project they’d been working on for the last week or so. And in the upper left corner was a picture […]
Get yer assets outta my office!
It’s been an interesting few days, folks. I’ve had more than a few conversations with people about the role of security, talking to stakeholders and how to actually understand the worlds of security. And one of the things that I keep tripping over is that people have a very tactical view of security. Now, ok, […]
Unhappy security customers
I know that a lot of people just don’t get the whole “customers of security” vibe I keep yapping on about, and some people still say the primary job of security is the enforcer not the advisor—including a rather long and otherwise well-written LinkedIn post I read last night. The thing is, I just don’t […]
Are you talkin’ to me?
One of the toughest things when you’re trying to understand what “security” is supposed to do is figuring out the right person to talk to. In some sense, it’s hard because a lot of security people are pretty technical, but it’s also kinda tricky because a lot of security people are introverts—although…this seems to be […]
