2018-09-28 Castle Visit-005-12

Friday Photo – Thanksgiving, turkey, and Cherokee Ranch

Just south of Denver, is the Cherokee Ranch and Castle - one of those hidden gems that you miss unless you go looking for it.  The castle sits on top of a mesa, overlooking the whole front range (I'll share a sunset pano sometime soon).  We had the chance to go visit for the Elk [...]
Continue Reading
(C) Depositphotos / @ooGleb

Beyond SIEM – Next Generation Security Analytics

I’ve written before that security is fundamentally an information management problem. It’s about having good sensors and instrumentation in the environment, having that information flow to a central repository where anomalies can be identified, and then being able to take action on it back in the environment. That’s traditionally be done through a SIEM solution, […]

Continue Reading
(c) Depositfiles / 	katacarix

Entering the era of pervasive security

I often open a keynote presentation by noting that organizations are undergoing a fundamental shift in security strategy – moving from compliance focused, to a risk based approach. That’s still ongoing, even for large and sophisticated organizations there is still a gravity towards ‘doing it for the audit’, rather than ‘doing it because there’s risk’. […]

Continue Reading
2013-10-California-369-Pano-12

Photo Friday – Sunset in Santa Cruz

When I travel, I keep my camera with me all the time, never knowing when an opportunity will come along.  We were having an early dinner on a pier in Santa Cruz when the sun set.  I left my dinner and ran outside to capture this pano of the horizon.  Definitely worth the cold fish!
Continue Reading
20071022_Australia-292-12

Friday Photo – New Horizons in Warrnambool

We took our first trip to Australia as a break from some really stressful events, and drove the great ocean road to Warrnambool.  The B&B there had the most amazing orange cake in the mornings, but in the evening, we just took a walk along the coast to watch the sunset. That's when I saw [...]
Continue Reading
2010-11-13 San Francisco-088-12

Commander’s Intent

So all your preventative measures have failed – to be fair, they succeeded for the last few thousand hacks, but the bad guys got lucky once, and you now have a full blown incident underway. Unfortunately you (the CEO) is at 23,000’ knocking K2 off their bucket list. How does your company execute?

Continue Reading
2017-10 Australia-239

Friday Photo: Here’s looking at Emu

The first time we went to Tower Hill in Victoria, Australia, I was just starting to get into photography.  We went in the middle of the day, and the critters were few and far between.  Since then, my technique has improved, and this time we went at dusk, when they were really active.  There was [...]
Continue Reading
2012-08 Yellowstone-1395

Don’t Poke the Buffalo

Ranchers know that there’s little that can stop a determined buffalo – barbed wire is at best a suggestion. That’s why taunting or poking one is just a bad idea (the guy in Yellowstone recently was extremely lucky). Malicious actors can be a bit like that too – that’s why I’ve written before that ‘hacking back’ is [...]
Continue Reading
(c) Dreamstime / Mosich.com

How much should you spend on security?

I regularly get asked by new CISOs for information – benchmarks – on how much organizations like theirs should spend on security. That’s a deceptively simple question, and while there’s plenty of surveys that you can reference, none of them provide more than a rough starting point – there’s just too many variables.

Continue Reading
(C) Depositphotos / Ysign

Disaster Recovery isn’t Security Recovery

I had an interesting conversation about data integrity attacks recently. Those involve altering records, rather than stealing them. The initial reaction was that they’d just restore from backup (like a disaster recovery plan). When I pointed out that most advanced attacks are in the environment for months before discovery, the light bulb went off: You […]

Continue Reading