What started as a way to help friends improve their security careers has started to turn into a full-fledged program called the Catalyst Career Compass™. Over the last few years, I’ve slowly worked through the elements to help friends – and each time I promise to make the approach public. Last weekend, I was called [...]
Is Cloud Computing Right for Your Business?

By Craig Nelson – special guest to The Security Catalyst Cloud Computing. Is it right for you? Sure. Is it right for your business? <crickets> By now, many have adopted a “cloud”-based service for personal use (sometimes without even realizing it). The definition of “cloud” can be a bit fuzzy at times, but to keep [...]
Security From Scratch: Getting the Lay of the Land

by Dennis Kuntz “You rush a miracle man, you get rotten miracles.†– Miracle Max, from The Princess Bride When building Security from Scratch, the challenge is in undertanding the situation from the start. Once the team is identified/assembled, the focus shifts rapidly to getting a handle on the security posture of the organization. This [...]
Into the Breach – Audio Series – Chapter 6 (Implementing The Strategy to Protect Information)

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio [...]
Podcast: Play in new window | Download (14.3MB)
Strike Up the Band: Building Security from Scratch

by Dennis Kuntz “Individual commitment to a group effort — that is what makes a team work, a company work, a society work, a civilization work.†– Vince Lombardi When faced with creating a new security program – Building Security from Scratch – it can be like George Taylor in The Planet of the Apes: [...]
Getting Behind the Wheel: Driving Audit and Compliance
“Pass on all hills and curves.â€Â ~Author Unknown The concept of the audit, to some, may feel relatively new and immature. However, financial statements have been audited since the 1800s and regulated IT Audits got a footing in the 1970s. The challenge in making sense of audits is in the approach: are you driven by [...]
The Leadership Challenge in Today’s Security Environment

Management is doing things right; leadership is doing the right things. ~Peter Drucker Leadership. It’s talked about a lot in today’s information security conferences and books – but how much of it is really happening? Do we, as professionals, really embrace leadership and its inherent risks, rewards, and challenges? Or, on the other hand, do [...]
The First Brick: Understanding Identity Management
What is Identity Management? Identity Management (IDM), or Identity and Access Management (IAM), is a suite of products that work together (more or less cohesively) to manage users and their access/passwords across the enterprise. Most identity management product suites consist of three or sometimes four parts: -Â Â Â Â Â Â Â Role manager -Â Â Â Â Â Â Â Identity manager -Â Â Â Â Â Â Â Access manager [...]
Identity Management in 13 Easy Steps

by Ioana Justus If you were asked to throw a few million dollars out the window, would you do it? If yes, let me know where and when – I’ll happily wait outside with my catcher’s mitt. More likely, the quick answer to this question is a resounding “NO”. Few circumstances would lead someone to [...]
Continue Playing

by Jeff Kirsch In “Playing Gamesâ€, I shared some lessons that I learned while playing chess with my son. Chess is a rich example of the need for, and challenge of, planning ahead. For those unfamiliar with this game of skill and strategy, the goal is simple: Capture your opponent’s king and force him into [...]



Engage with Michael Santarcangelo