Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.

Sense of Security written by C. Warren Axelrod

C. Warren Axelrod

C. Warren Axelrod is the Chief Privacy Officer and Business Information Security Officer for a financial services company, where he interfaces with the firm’s business units to identify and assess privacy and security risks and mitigate them, to have employees become familiar with security policies, standards, and procedures, and to ensure that they are followed.

Warren was honored with the prestigious Information Security Executive (ISE) Luminary Leadership Award 2007. He also received a Computerworld Premier 100 IT Leaders Award in 2003 and his department’s implementation of an intrusion detection system was given a Best in Class award.

He represented financial services information security interests at the Y2K command center in Washington, DC during the century date rollover. He is a founder of the FS/ISAC (Financial Services Information Sharing and Analysis Center) and served two terms on its Board of Managers. He testified at a Congressional Hearing in 2001 on cyber security.

Warren has published two books on computer management and numerous articles on a variety of information technology and information security topics, including computer and network security, contingency planning, and computer-related risks. His third book, “Outsourcing Information Security,” was published by Artech House in September 2004.

He holds a PhD in managerial economics from the Johnson Graduate School of Management at Cornell University and honors bachelors and masters degrees in electrical engineering, economics and statistics from the University of Glasgow, Scotland. He is certified as a CISSP and CISM.

Ron Ross and a “New” Approach to Cybersecurity

– No sooner had I finished my latest “Are We Secure?” piece than I read an August 23, 2016 article on Fedscoop by Shaun Waterman with the title “New Approach Needed to IT, Says NIST’s Top Cyber Scientist,” which you can find at…

Are We Secure? And Other Ridiculous Questions

– I would expect that practically every infosec professional has been asked at one time or another “Are we secure?” by non-technical senior executives. Technical executives know better than to ask the question. But what is an appropriate answer? If you say “Yes” you have assumed all…

Self-Driving Software … Test, Test, Test

– A spokesman for Mobileye, the company that developed the Autopilot software for Tesla, remarked that they hadn’t tested their software for the particular scenario in which a Tesla car slammed into a tractor-trailer, proceeded under the trailer and drove independently for some distance,…

Techies, Newbies and the Preservation of Privacy

– No sooner had I submitted my May 30, 2016 “Facebook Fallibility—Algorithms vs. Judgement vs. Ourselves” BlogInfoSec column about Facebook having used newbies to select items for “Trending Topics” than Jim Rutenberg published an article, “Facebook’s Troubling One-Way Mirror,” on the…

Privacy, Secrecy, Free Access … Misinterpretation?

– The pity of it all is that many of the issues that we face with privacy rights, national security and freedom of information are a result of misinterpreting underlying concepts. Unfortunately, our “brilliant engineers,” as politicians like to call them, are the ones who appear to be the most…