Santarcangelo Interviewed on “The Web Squeeze” – Listen In!

On Friday, The Web Squeeze posted an interview with me. We had a blast discussing backups, passwords, building more secure websites and a bit about the human paradox and Into the Breach.

I’m impressed with The Web Squeeze (http://thewebsqueeze.com/) and hope to get more involved in additional ways.

In the meantime, I really enjoyed the banter (enough to really get me thinking about getting a new show or two going) and the professionalism extended to me by Jacob and Linda.

I hope you consider taking a listen; more – share it with the folks you know in development and see what they say. Use this as a springboard for conversations.

Here is the link: http://www.thewebsqueeze.com/freelance-podcasts/into-the-breach.html

Bookmark and Share

Giving back: The Catalyst Career Compass Program

Giving back: The Catalyst Career Compass Program

What started as a way to help friends improve their careers has started to turn into a full-fledged program called the Catalyst Career Compass™.

Over the last few years, I’ve slowly worked through the elements to help friends – and each time I promise to make the approach public. Last weekend, I was called on my promise (thankfully) and decided to open it up.

More, with the help of Andy Willingham, Kevin Riggins and others, we are preparing to relaunch and improve the Security Catalyst Community. When we relauch (hoping for Q2 but the timeline is not defined), new opportunities for members include the career compass program that leads to a mentoring program.

We’re all excited about the program and the possibilities.

In the meantime, we have colleagues who need a boost – they need to build, calibrate and follow their career compasses.

This is a new program – so I am open to a small group of people running through the elements for their own benefits, and to help shape the elements that will be incorporated into the community. In fact, I’d like to figure out how to train others on the approach and work as a community to help each other out.

So it starts now.

And we’ll start small.

For now, no charge (money) to partcipate — but there is a cost. If you are interested, send me an email (securitycatalyst/gmail) or engage me on twitter (http://twitter.com/catalyst) and let’s discuss. We have to keep the initial run small, and we need people who are willing to participate fully and work through the entire system.

More details below:

Career Compass Overview

Whether you are currently a Security Professional or want to become one, this highly flexible program will help you set and meet your professional ambitions while serving lifestyle goals.

Set your Career Compass:

  • To prepare for a raise
  • To receive a promotion
  • For career development
  • If you are ready to move into the security field
  • To find a new position (within your current company or outside it)

Determine your path and venture forth.

Setting Your Career Compass is a multi-faceted program to help you refine your career objectives and realize them.

It is a three-step process.

1.            You will first think about and answer a series of questions about yourself, your ideal working environments and your future. We help you align your answers – the ‘who you are’ – with what you have done and where you would like to go.

2.            Then we prepare you to effectively communicate your value to the right audience. With guidance you will build a personal brand in the form of a resume, bio, cover letter and whatever else is needed for you to reach your goals.

3.            With all the background work complete, we will help you follow the compass you built.

We do not judge.

Everyone thrives in different situations and has different desires in life. Our passion is to help you find the unique value you bring to an organization and position yourself for success.

Why the Compass approach works.

We guide you through a process that helps you explore your strengths, values and goals. As a result, you will understand yourself better than simply listening to someone tell you what they think, based on a questionnaire.

You will be self-aware.

You will have the clarity required to communicate your value effectively. After guiding you through this exploratory process, your Career Compass helps you position and differentiate yourself from others in a strong finished package – written and oral.

The program will help you craft a resume that is simple, powerful and designed to attract the attention of the “right” people. It will help you market yourself better and guide you to greater success.

How much time does this take?

Like most things in life, the more you invest into this program, the more you will get out of it. It is recommended that you budget 3-5 hours to complete step one, 3-5 hours for step two and 3-5 hours to begin step three.

Step three is ongoing but 3-5 hours gets people where they need to be. Some will breeze through the process. Others will need more time. There is no right answer, but the time you invest in yourself will pay off down the road.

Bookmark and Share

On tap at The Security Catalyst for February

Greetings from Myrtle Beach!

Extra! Extra!

February at the Security Catalyst Online

We did it.

The house is rented. We packed, sold or donated most of our “stuff.” We loaded up the RV and headed south.

More important, we are liberated. I feel grounded, connected and free.

The purpose of this change is to live simply and engage with more people – to seek experiences over “stuff.” Part of our focus on learning and living deliberately allows me more time to focus on the programming and content we provide through the Security Catalyst Online Experience.

In addition to our contributors powerful insights forged in the trenches (more below), this month we welcome some guest voices (and topics).

On tap for February

Our contributors have some great insights to share, including:

  • The key to effective communication and overall success when working with others from Trish
  • Martin explains how disruptive change, when well planned, crisply executed, and continually adjusted can enable organizations to “jump the curve” and function well above where they were previously
  • Why we need more attention focused on the consequences of actions with a challenge to help prevent and reduce fraud from Sharon
  • Using compliance to your advantage without doing damage; as a result – decision makers may be more willing within the context of a compliance effort to spend money on information security, but they may also be more open to education and awareness efforts from Dennis
  • Aaron shares how to avoid legal 500 error with privacy policies

And I’ll be climbing back into the writing saddle – and sharing my focus for the year with the awareness that works™ column.

Guest Voices

Craig Nelson – a good friend from the beginning of my career – chimes in with his insights on how businesses can determine if “the cloud” is right for them.

We might sneak in another guest voice or two (and try to convince them to stick around for the balance of the year!).

Engagement is the key to success

I invite you to read, consider and engage: likes, dislikes and constructive challenges are welcomed!

Connecting and engaging in person is a rich experience, indeed.

To that end, we’ll be leaving Myrtle Beach in the middle of February and traveling to San Franciso with stops planned in Atlanta, Dallas, and Phoenix.

Are you along the way?

If so, I’d love to explore how we work together.

Bookmark and Share

Into the Breach – Audio Series – Chapter 7 (Putting the Strategy to Work: A Pilot)

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio version of Into the Breach, written by Michael Santarcangelo and read by the author. Join us for a new chapter released on the first Tuesday of each month (there are 13 chapters total).

What you’ll find in this episode (Chapter 7)

The strategy has been revealed. The fundamentals of what is now The Catalyst Method have been shared (note: if you want the update on The Catalyst Method, contact us to learn more).

So how do you implement in a way that gets results?

In this chapter, “Putting the Strategy to Work: A Pilot,” Michael explains the basic approach – with key insights – to engaging people in the process of protecting information. Learn how to select the pilot approach that works best, build the team and plan a strategy that drives tactical and strategic success.

There is no “one-size-fits all” approach, and this chapter lays out how to make the right decisions the first time. Get a jumpstart on success with this chapter.

You want more, so after listening…

After listening to this segment of Into the Breach, keep the energy going and support the shift in thinking and inspire behavior change by

  1. Engaging (not following) Michael on twitter (http://twitter.com/catalyst)
  2. Subscribing to The Security Catalyst podcast & blog to get more insights
  3. Learn more about The Catalyst Foundation Series – proven success for security initiatives to excite, ignite and turn insiders into allies who reduce business risk!

Go deeper Into the Breach with Michael Santarcangelo with EMC

Each month, EMC pulls back the curtain and provides more insights and a deeper discussion with Michael Santarcangelo about the elements in this chapter. Learn how to harness the power of their people to inform and improve the risk management process in a matter of weeks.  Go to www.configuresoft.com/securitycatalyst today to register now and listen to the recorded sessions from before and get access to the latest session.

Bookmark and Share

Into the Breach – Audio Series – Chapter 6 (Implementing The Strategy to Protect Information)

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio version of Into the Breach, written by Michael Santarcangelo and read by the author. Join us for a new chapter released on the first Tuesday of each month (there are 13 chapters total).

What you’ll find in this episode (Chapter 6)

Chapter Six is where Michael explains how to customize and implement the Strategy to Protect Information. The information he shares is designed to bring immediate results. This set the stage for the refinement of what is now called The Catalyst Method™ — what Michael teaches, guides and uses to help organizations get results that transform insiders into allies who reduce business risk.

Go deeper Into the Breach with Michael Santarcangelo with EMC

Each month, EMC pulls back the curtain and provides more insights and a deeper discussion with Michael Santarcangelo about the elements in this chapter. In fact, for this chapter, Michael explains how he has modified the implementation and refined “The Catalyst Method™” to get real, rapid results. Learn how to harness the power of their people to inform and improve the risk management process in a matter of weeks.

Go to www.configuresoft.com/securitycatalyst today to register now and listen to the recorded sessions from before and get access to the latest session.

You want more, so after listening…

After listening to this segment of Into the Breach, keep the energy going and support the shift in thinking and inspire behavior change by

  1. Engaging (not following) Michael on twitter (http://twitter.com/catalyst)
  2. Subscribing to The Security Catalyst podcast & blog to get more insights
  3. Learn more about Michael’s keynotes – and hire Michael Santarcangelo to excite, ignite and turn insiders into allies who reduce business risk!
Bookmark and Share

Into the Breach – Audio Series – Chapter 5 (The Strategy to Protect Information)

Into the Breach

Into the Breach

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy.

This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio version of Into the Breach, written by Michael Santarcangelo and read by the author. Join us for a new chapter released on the first Tuesday of each month (there are 13 chapters total).

What you’ll find in episode 6, Into the Breach: Chapter 5 (The Strategy to Protect Information)

Chapter 5 is the introduction to Part II of Into the Breach — where the focus shifts to looking at what needs to be done. I outline a powerful, yet simple, approach dubbed “The Strategy to Protect Information.”

Key is the focus on information, not data, and the three steps that any organization must follow in order to be effective. The balance of Part II explains how – but just learning and understanding the three part strategy is transformative.

After listening to this chapter, you will know the strategy and be able to apply it to your current challenge — small and tactical or larger and organizational.

The timing works well as 2010 initiatives are considered – and questions are always welcomed at getresults@securitycatalyst.com, by engaging with me on twitter (http://twitter.com/catalyst)

Unleash the full power in time for the new year: Announcing the Team Inspiration Bundle

Imagine the power of presenting a hand-signed, hard cover version of Into the Breach: Protect Your Business by Managing People, Information and Risk to a member of your team, an executive or even a partner or client to give them the very keys necessary to refresh, re-energize and refocus for an exciting year ahead.

As we head into 2010, Michael Santarcangelo and the entire The Security Catalyst team is focused on celebrating the good of people and amplifying the positive. Into the Breach reveals the insights and sets forth the path for any person or organization to follow to get results that turn insiders into allies who reduce business risk.

This is a gift that opens the doors to more and unlocks the ability to harness the power of people. More, this book can be accompanied with an eBook or audio book version – and the resources of The Security Catalyst Online to set the stage for a transformative year ahead.

CLICK HERE to order the special 10-book or 20-book package at a deep discount by December 24, 2009.

You want more, so after listening…

After listening to this segment of Into the Breach, keep the energy going and support the shift in thinking and inspire behavior change by

1. Engaging (not following) Michael on twitter (http://twitter.com/catalyst)

2. Subscribing to The Security Catalyst Online Blog and Podcast to get more insights

3. Hire Michael to deliver guaranteed solutions for your organization that turn insiders into allies who reduce business risk

Not enough? Need more?

Go deeper Into the Breach with Michael Santarcangelo in December, courtesy of EMC

In December, EMC will release the next recording of Michael Santarcangelo — behind the scenes — to journey deeper into the ideas behind the Strategy to Protect Information. Go to www.configuresoft.com/securitycatalyst today to register now and listen to the recorded sessions from before and get reminded to download the December session.

Bookmark and Share

Into the Breach – Audio Series – Chapter 3 (Breaking the Security Diet)

Episode 4: Into the Breach: Chapter 3 (Breaking the Security Diet)

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio version of Into the Breach, written by Michael Santarcangelo and read by the author. Join us for a new chapter released on the first Tuesday of each month (there are 13 chapters total).

What you’ll find in this episode (Chapter 3)

Breaking the security diet is recognition that what happens in organizations today is more akin to a crash diet than a healthy approach to securing information. In this chapter, Michael reveals the high cost of this “fad diet” approach and shines a light on the new fad diet: encryption. However, there is a solution, and Michael explains how to break the fad diet, improve leadership and engage individuals. A pivotal chapter in the book, designed to create a fundamental change in the way organizations and individuals protect information.

Go deeper Into the Breach with Michael Santarcangelo in October with EMC

In October, join Michael Santarcangelo for a live conversation to journey deeper into the chapter. During the conversation, hosted by EMC, Michael will:

  • Reveal the ideas and concepts that may have been pared from the chapter you just listened to
  • Expand upon or update the elements in the chapter you just listened to
  • Answer questions in a candid and direct style – focused on delivering insights that lead to results

Go to www.configuresoft.com/securitycatalyst today to register now and listen to the recorded sessions from before and get reminded to join in for the September session.

You want more, so after listening…

After listening to this segment of Into the Breach, keep the energy going and support the shift in thinking and inspire behavior change by

  1. Engaging (not following) Michael on twitter (http://twitter.com/catalyst)
  2. Subscribing to The Security Catalyst podcast & blog to get more insights
  3. Checking out the upcoming schedule to meet Michael (and his family) “onTour” – as they travel the country by RV (working on Dallas, Phoenix and San Francisco, with a likely stop in Atlanta and maybe Charlotte)
Bookmark and Share

Into the Breach – Audio Series – Chapter 2 (People Just Want to Do Their Jobs)

Episode 3: Into the Breach: Chapter 2 (People Just Want to Do Their Jobs)

Welcome to the audio series of Into the Breach: Protect Your Business by Managing People, Information and Risk (click this link to learn more about this book and pick up a complete copy – to get started on your personal journey). This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio version of Into the Breach, written by Michael Santarcangelo and read by the author. Join us for a new chapter released on the first Tuesday of each month (there are 13 chapters total).

What you’ll find in this episode (Chapter 2)

Chapter 2 reframes the challenge with powerful insights about the way people “just want to do their jobs.” Michael introduces what he calls the two principles  – a powerful concept about how people do their jobs, and an eye-opener that leads to improved interactions. The corollary to these principles is also explored, along with guidance on what to do about it. With a focus on individuals, Michael explains, “Compliance is not a video game” and reveals that a common approach of “exclusion” is creating more harm than good. The chapter wraps up with a discussion of “the human response to pain” – with a common example played out in organizations everywhere.

Go deeper Into the Breach with Michael Santarcangelo on September 16th

On September 16th, join Michael Santarcangelo for a live conversation to journey deeper into the chapter. During the conversation, hosted by EMC, Michael will:

  • Reveal the ideas and concepts that may have been pared from the chapter you just listened to
  • Expand upon or update the elements in the chapter you just listened to
  • Answer questions in a candid and direct style – focused on delivering insights that lead to results

Go to www.configuresoft.com/securitycatalyst today to register now and listen to the recorded sessions from before and get reminded to join in for the September session.

You want more, so after listening…

After listening to this segment of Into the Breach, keep the energy going and support the shift in thinking and inspire behavior change by

  1. Engaging (not following) Michael on twitter (http://twitter.com/catalyst)
  2. Subscribing to The Security Catalyst podcast & blog to get more insights
  3. Checking out the upcoming schedule to meet Michael (and his family) “onTour” – as they travel the country by RV (dates now in Alaska, NYC and working on Dallas, Phoenix and San Francisco, with a likely stop in Atlanta and maybe Charlotte)
Bookmark and Share

Security Catalyst Show for 23 July 2008 | Breach Breakdown with Adam Dodge

Bookmark and Share

Three Challenges to Building Trust (and how to overcome them)

How hard is it to build trust?

“When people honor each other, there is a trust established that leads to synergy, interdependence, and deep respect. Both parties make decisions and choices based on what is right, what is best, what is valued most highly.” –Blaine Lee

In my last article, I introduced the efforts of CompTIA to address a growing need in business today with the Trustmark certification.  The Trustmark, initially focused on small and medium-sized VARs, represents a promising step forward in how businesses demonstrate and verify they protect information. As outlined in part one, I see a far larger benefit for small and medium businesses everywhere – provided Trustmark is positioned and grown properly.

Note: The more I think about Trustmark and the challenges of getting it right, the more I see vast potential. As such, I’m lengthening this article into a series of posts to share more ideas and invite constructive conversation.

 

The Challenges

Now I turn my attention to addressing the key challenges – with suggestions on how to meet and overcome them. This is also a call to action for professionals to come together to tackle these challenges industry-wide.

When I left the Trustmark workshop, I sensed the start of a necessary program that is heading in the right direction. In the weeks since, I have continued to consider the approach – and the challenges that must be overcome — in the context of my own experience with frameworks, education and industry measurement.

Aside: these challenges are not unique to Trustmark – these are challenges many of us face every day, especially when it comes to presentations, standards development, projects and our day-to-day activities.

The next few articles will address some of the key challenges and provide some insights – based on my experience – to successfully address those challenges.

 

  1. No Need to Reinvent the Wheel
  2. Provide Transparency with Support
  3. Establish a Sound Audit Process

 

Make a Difference

While you may not (yet) share my enthusiasm for a way to verify how vendors and other businesses protect information, your experience, concerns, insights and ideas are essential to the success of this and other efforts. So – reach out to me by email, telephone, twitter or join me in the Security Catalyst Community to sound off.  I’m interested in any and all feedback – especially from small business owners, VARs, vendors, anyone who has been through this process. 

By blending our voices and experience together, we are able to influence positive change (while actively considering and addressing unintended consequences).

Stay tuned… 

Bookmark and Share