the State of Security

trends

Communicating the value of Information Security – Part 1

Communicating the value of Information Security – Part 1

by Dwayne Melancon

Earlier this year, I began writing about my project relating to “connecting security to the business.” Essentially, I want to find repeatable methods to help information security people communicate the business value of their activities to non-technical audiences. Starting today I’ll be sharing some of the things I’m learning on this journey.

Read More
Why physical and information security working together might give a Hollywood spy a headache

Why physical and information security working together might give a Hollywood spy a headache

by Shawna Turner-Rice

Everyone has a favorite spy movie. I admit to a particular fondness for the Bond franchise, even though most people can probably forecast the storyline without ever actually seeing any specific movie.  There is a specific piece of that trope that completely speaks to the relationship between cybersecurity and physical security. In all spy movies, [...]

Read More
Public Service Announcement – Stress and Burnout in the InfoSec Community

Public Service Announcement – Stress and Burnout in the InfoSec Community

by Shawna Turner-Rice

A week ago, to kick off RSA, there was a Professional Development Track Session (PROF-001) on the topic of stress and burnout in the Information Security industry. One of the comments made at the track was that if you do a Google search on this topic, nothing comes back. That’s something that’s easy to fix, [...]

Read More
Thumbnail image for Why Many Smart Security People Aren’t Social

Why Many Smart Security People Aren’t Social

by Jon Speer

Most of us know and follow a variety of really smart people who say a lot of smart things, but occasionally one of these things sticks and becomes a new lens for how we process the world around us.   I’ve recently realized that a November post from Rajesh Setty’s blog, “Why MANY smart people [...]

Read More
Predicting the top 10 Infosec Predictions for 2012

Predicting the top 10 Infosec Predictions for 2012

by Dwayne Melancon

This is the time of year when you start seeing lots of predictions about things that will happen next year.  With that in mind, I thought I would predict the predictions I think we’ll see for 2012.

Read More

Understanding the Cost of Compliance — Part IV

by Cindy Valladares

This is the fourth and final blog in my series of Understanding the Cost of Compliance, and I’ll discuss the per capita cost of compliance and non-compliance. The True Cost of Compliance report estimates the cost of compliance to be $3.5M and the cost of non-compliance to be $9.3M. In my conversations with practitioners, I’ve [...]

Read More