- Leadership Return on Investment (ROI) - A Touchy Security Topic
ROI in finance means income-generating return, but security prevents loss rather than creating wealth. Vendors misuse "ROI" to justify expenses as "investments." ROSI calculations rely on annualized...
- Threat Intelligence Advanced Persistent Threat (APT) - A Touchy Security Topic
APT causes heated debates because it's become a marketing buzzword. Some define it as an attack process with certain characteristics (the "What" group), while Mandiant uses it for specific...
- Communication The Lure of Notoriety for Information Security Experts
If an expert makes a discovery that improves security, can they make a difference if no one hears about it? On-line presence builds professional reputation, but pursuing notoriety diverts attention...
- Training What is a Cybersecurity Expert?
As AI takes over the routine recall that once signaled domain expertise, the experts who stand out are the generalists who understand the business and the architects who integrate the pieces. Those...
- Incident Response Incorporating Mobile Devices into Enterprise Security
Enterprise security hasn't kept up with consumerization—powerful mobile devices often have VPN access and email but lack mature OS security controls. Organizations need greater network segmentation,...
- Product Management Cloud Makes Security More Affordable for Smaller Companies
When this article was first written, cloud adoption was still emerging. The thesis that cloud's pay-per-use billing model would make enterprise security affordable for SMBs has been thoroughly...