Columns

RSS

It’s been nearly two years since we addressed cyber insurance in the Cyber Tactics column, so I decided to get an update from Bob Parisi, Managing Director at Marsh.

Today in America, Second Amendment rights and university security missions are seemingly at odds.

Cities big and small are making their way into the smart realm, putting sensors on everything from street lights to sensors, buildings to connected cars, and thus, making themselves “smart.”

There have been volumes written about the role of the CSO and how to gain a seat at the table in the C-suite.  A relatively small number of CSOs have been able to convince their management that the CISO should be under their purview, citing the inherent mission conflicts that exist when the CISO reports to the CIO.

Analyzing the background of security leaders across the corporate security and risk management landscape, it is not surprising to see that a significant percentage of them have come from the public sector.

There are critical questions that the enterprise security executive team should be asked before preparing to purchase any physical security solution.

Mike Tyson notably said, “Everyone has a plan ‘till they get punched in the mouth.” So, how do you ensure the same doesn’t hold true for your company’s incident response plan when a real breach occurs?  Enter the NIST Framework category titled Mitigation.

Albert Einstein once observed, “Not everything that can be counted counts, and not everything that counts can be counted.”

It was about a year after 9/11 and I was painfully concerned about our industry.

Last month I discussed what to expect across the interview processes after you have been selected as a potential candidate.