Giving back: The Catalyst Career Compass Program

What started as a way to help friends improve their security careers has started to turn into a full-fledged program called the Catalyst Career Compass™. Over the last few years, I’ve slowly worked through the elements to help friends – and each time I promise to make the approach public. Last weekend, I was called [...]

Is Cloud Computing Right for Your Business?

cloud_comp_150

By Craig Nelson – special guest to The Security Catalyst Cloud Computing. Is it right for you? Sure. Is it right for your business? <crickets> By now, many have adopted a “cloud”-based service for personal use (sometimes without even realizing it). The definition of “cloud” can be a bit fuzzy at times, but to keep [...]

Security From Scratch: Getting the Lay of the Land

layofland

by Dennis Kuntz “You rush a miracle man, you get rotten miracles.” – Miracle Max, from The Princess Bride When building Security from Scratch, the challenge is in undertanding the situation from the start. Once the team is identified/assembled, the focus shifts rapidly to getting a handle on the security posture of the organization. This [...]

Into the Breach – Audio Series – Chapter 6 (Implementing The Strategy to Protect Information)

itb-audioseries-150px

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio [...]

Strike Up the Band: Building Security from Scratch

concert

by Dennis Kuntz “Individual commitment to a group effort — that is what makes a team work, a company work, a society work, a civilization work.” – Vince Lombardi When faced with creating a new security program – Building Security from Scratch – it can be like George Taylor in The Planet of the Apes: [...]

Getting Behind the Wheel: Driving Audit and Compliance

“Pass on all hills and curves.”  ~Author Unknown The concept of the audit, to some, may feel relatively new and immature. However, financial statements have been audited since the 1800s and regulated IT Audits got a footing in the 1970s. The challenge in making sense of audits is in the approach: are you driven by [...]

The Leadership Challenge in Today’s Security Environment

Strength in Numbers

Management is doing things right; leadership is doing the right things. ~Peter Drucker Leadership. It’s talked about a lot in today’s information security conferences and books – but how much of it is really happening? Do we, as professionals, really embrace leadership and its inherent risks, rewards, and challenges?  Or, on the other hand, do [...]

The First Brick: Understanding Identity Management

What is Identity Management? Identity Management (IDM), or Identity and Access Management (IAM), is a suite of products that work together (more or less cohesively) to manage users and their access/passwords across the enterprise. Most identity management product suites consist of three or sometimes four parts: -        Role manager -        Identity manager -        Access manager [...]

Identity Management in 13 Easy Steps

for mysite

by Ioana Justus If you were asked to throw a few million dollars out the window, would you do it? If yes, let me know where and when – I’ll happily wait outside with my catcher’s mitt. More likely, the quick answer to this question is a resounding “NO”. Few circumstances would lead someone to [...]

Continue Playing

1210501_chess2

by Jeff Kirsch In “Playing Games”, I shared some lessons that I learned while playing chess with my son. Chess is a rich example of the need for, and challenge of, planning ahead. For those unfamiliar with this game of skill and strategy, the goal is simple: Capture your opponent’s king and force him into [...]