The “Dynamic Tower”: Security as a Process

The Security for Business Innovation Council report published last month lays out a roadmap for responding “When Advanced Persistent Threats Go Mainstream” (as the report title puts it). One of the most important recommendations in that report is captured by Roland Cloutier, VP and CSO of ADP Inc, when he says: “you have to have the resources and a process for risk decision-making that enable rapid changes to your protection platform.” That is, the roadmap in the report doesn’t lead to a static, unchanging security monolith. It’s a model for a process that builds dynamism into security, not unlike the architectural model of the Dynamic Tower that David Fisher has designed for Dubai.

IT Security in the Age of APTs

In January 2010, at the turn of the decade, I wrote the following lines in my blog: “It will be an interesting decade from a cybercrime perspective. Employees are one of the weakest links in corporate security… The current defenses cannot suffice, and the industry must think of a new defense doctrine.” A lot of folks in the security space raised an eyebrow.

Advanced Persistent Threats – Looking for Answers at All Levels of the Organization

APT has become a buzz of security professionals for the past few years, but now has legitimate attention among all levels of the organization. Why? Because executive leadership knows that buzzword has now become a clear and present danger even among private sector organizations.

Regulation Proliferation: Don’t Get Caught Flat Footed

Dime con quién andas y te diré quién eres -Spanish Proverb: “A man is known by the company he keeps” “Those who cannot remember the past are condemned to repeat it.” -George Santayana Don’t get caught flat footed by the way regulations are changing, demanding, costly and sweeping the world.  Better yet, don’t get squashed [...]