Articles on Leadership

• Training Tying Shoelaces and Information Security
  Most people tie shoelaces with the weaker knot because the stronger version is harder for children to learn. Similarly, security "best practices" we've followed for years may not be optimal—tribal...
• Risk Management Why Are Executives More Prone to Accept Risks?
  Research links high status and power to greater trust in others and overconfidence in one's own knowledge. Executives may accept security risks while being overly trusting and without spending...
• Communication Balancing Brevity and Verbosity in Business Communications
  Brevity is usually the right call. The harder skill is knowing when to go long.
• Social Networking Twitter Social Networking Among Information Security People
  Twitter offers three-fold value for security professionals: discovering curated content (users act as content curators), interacting with peers (social stigmas almost non-existent), and researching...
• Leadership 9 Convenient Lies in Cybersecurity
  Familiar security claims like "we use AES-256" or "we're SOC 2 compliant" are technically true. Each one omits conditions that determine risk, and we need to communicate them carefully to avoid...
• Leadership Saying Something Nice About Information Security