My Writing

• Tools 10 Information Security Mistakes: A False Sense of Security
  Ten practices that create false security: capturing logs without sufficient detail, policies no one follows, vulnerability scans without remediation processes, pen tests excluding workstations,...
• Assessments Perception of Value in Security Consulting Projects
  Clients can't evaluate specialized security work directly, so they estimate value by assessing effort—usually time. A skilled locksmith opening locks in seconds gets fewer tips than when...
• Communication 10 Communication Tips for Security and IT Professionals
  Explaining security and IT work is often harder than the work itself. Ten habits will sharpen how you explain it to specialists, executives, and everyone in between.
• Social Engineering Cybersecurity Deception Lessons from World War II
  WWII deception succeeded through ambiguity that paralyzed enemy decisions and false attractiveness that drew attention to the wrong plan. Modern honeypots, honeytokens, and decoy services rely on the...
• Training Make Security Policies Harder to Read to Improve Retention?
• Social Networking Predicting 2011 Information Security Trends