September 3, 2010

I prepare to depart Michigan with gifts for you

After a great week in Michigan, tonight we pack up and prepare to head to Ohio tomorrow. Friday promises to be busy and exciting – and then on Saturday, we head to Maryland (Metro DC) for a week. Which brings me to the gifts I promised: Join a conversation, get a free copy (hardcover) of [...]

Three Ways to Avoid “Wheel Reinvention” – and Build a Better, Trusted Solution

The last article in this series explored the top three reasons why group have a tendency to reinvent the wheel (read it here, or the entire series started here). And now, some solutions: Beyond the frustration caused by an approach that simply recreates the wheel, the result is often a solution that is not trusted [...]

Security Catalyst Community: Discussion Forum Activity for June 24

Here are some recent discussions. Got an opinion, jump in! Building trust in the Trustmark – would you use it? Trust it? CISSP – on it’s way out, or not. Or both? Black Hat/DefCon Do you use NAC/NAP/TNC? SAP Enteprise Portal Your participation is your currency (means no charge to join) – the more you [...]

Three Challenges to Building Trust (and how to overcome them)

Now I turn my attention to addressing the key challenges – with suggestions on how to meet and overcome them. This is also a call to action for professionals to come together to tackle these challenges industry-wide.

When I left the Trustmark workshop, I sensed the start of a necessary program that is heading in the right direction. In the weeks since, I have continued to consider the approach – and the challenges that must be overcome — in the context of my own experience with frameworks, education and industry measurement.

Can you be trusted? Can you prove it?

“What questions do I need to ask to make sure my vendor is protecting my information?” I got asked that question last week from a new client working through the Protecting Information Program (PIP). Following the PIP process, he realized vendors were supporting key systems — raising questions he could not answer. He needed more [...]