- What is ABC #infosec posture? Being able to block ~95% of attacks (all but targeted & nation state) & then risk mgmt program custom #fsf12 2012-05-25
- Easiest way to know if you will be targeted by attacker (i.e., chinese): 1. ask FBI, 2. Read 5yr plan of China & U.S. reports #fsf12 2012-05-25
- Top 7 industry priority in 5 yr plan of Chinese: (biotech, new energy, highend equip mfg…& next-gen IT) http://t.co/0AZfi4Rm (pdf) #fsf12 2012-05-25
- Actors are inserting employees within companies to steal data from the inside .. must make investment in security community #fsf12 #infosec 2012-05-25
- What nations are aware globally of threat and operationally active? – includes India, Japan, Germany, and France beyond the U.S. #fsf12 2012-05-25
- Adversary attack private industry, law firms, institutions, & outside scope of legitimate targets against U.S. & such nations #fsf12 2012-05-25
- Know that data is important. Who can access it; move it; etc.. "who" in this case is the Packets instantiated from User / Computer #fsf12 2012-05-25
- Having internal offensive capability inside is necessary to provide input to leadership & product on remediation & risk mgmt #fsf12 2012-05-25
- Pen-testing should be conducted on full coverage & scope on what matters & what supports, accesses, & influences .. #fsf12 #infosec 2012-05-25
- RT @zeroskillor: Android analysis framework http://t.co/lSSpxBAW #bsides #project <- tease 2012-05-25
- First Day on the CISO job: Determine if the biz is already compromised >then eval biz strtgy >align it>then manage #infosec portfolio #fsf12 2012-05-25
- SEC Guidance Is a Really Big Deal @Taosecurity view w/ links http://t.co/2cdSnJDD <- it isb/c it is NOT compliance baseline 2012-05-25
- That's a wrap for me at #fsf12 .. time to write some notes down and deal with the ring of fire, aka my email. Great collaborations! 2012-05-25
- RT @SpaceX: RT @nasakennedy: Video from the capture of the @SpaceX Dragon by the robotic arm on ISS. http://t.co/vneQlGMK <- sweet! 2012-05-25
- The Great CON is out! http://t.co/bWCQG8fW ▸ Top stories today via @fredjacquemin @RevolutionGroup @SecurityMetrics 2012-05-26
- Nothing like having to have your car towed on a holiday. May be biking it to the bar and pool! Is that still a triathlon?! 2012-05-26
- Wrapped up a 104 mile bike ride in 93 degree ATL heat. Grateful for #BudLight crew in Cartersville marking the route! #ironman in training 2012-05-27
IT Compliance and Controls
Converging Business, Information, and Controls
My Book:
Payment Card Industry (PCI DSS) Controls Explained- What do major developments in big data, cloud, mobile, and social media mean? A CISO perspective..
- Information Security executives … is responsibility being abdicated?
- My RSA Conference Notes and perspective – Tuesday AM 2013
- What the Cyber Executive Order means to your business, a critique
- If I were Evil Series: Creating a malware pandemic through USB charging stations
0 responses so far ↓
There are no comments yet...Kick things off by filling out the form below.
Leave a Comment