Arguing for infosec's limitations

Here's a powerful information security-related quote that underscores many of the challenges we face:

"Some men have thousands of reasons why they cannot do what they want to, when all they need is one reason why they can." -Willis R. Whitney

Is your management on board with security or not? They're either part of the solution or part of the problem. It's up to you to take the appropriate steps to convince them that information security is better than the alternative.

Read More

Calling all executives and managers...

For all those who don't quite "get" information security...You've heard the saying: It's not what happens to you in life that is important - what matters is how you react to what happens.

Don't let this be your mantra for managing information risks!

It DOES matter what happens to you...figure out where you're weak and don't let it happen. Oh, and, have a Plan B.

Read More

Windows server and workstation security essentials

Over the past couple of months I was so focused on writing new content that I've been remiss in posting it online. Here are some tips, thoughts and general opinions around Windows server and workstation security:

Desktop backup oversights that can get you into a bind

Free open source security tools for finding and fixing Windows flaws

Mobile security and how you can no longer ignore its impact on enterprise desktop management

Why locking down applications at the desktop can provide you with great returns

FAQ: Hardening Windows servers


Enjoy!

As always, check out principlelogic.com/resources for links to all of my information security whitepapers, podcasts, webcasts, books and more.

Read More

One-sided information risk management doesn't work

Read More