Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.

Category Archives: Contingency Planning

Response to Gary Hinson

– First, you should know that I very much agree with and respect Gary Hinson’s approach to infosec. I have frequently quoted his definitive paper “Seven myths about information security metrics,” which first appeared in the July 2006 issue of The ISSA Journal, and which you can on the website…

Cyber Lessons Learned from the Gulf Oil Catastrophe

– If there is one resounding lesson from the Gulf oil disaster, it is that depending on the private sector to protect one’s Nation and one’s natural resources doesn’t work. Various reports seem to indicate that BP is vetting all activities based on its own potential cost and not on the social…

Where Oh Where is (Cyber) Red Adair?

– Many readers probably do not remember “Red” Adair. He was the go-to guy whom you called as a last resort to cap a blazing or gushing oil well, either on land or offshore. In April 1977 he capped a well in the North Sea that was the second largest leak of the time, and he [...] …

Bungee Jumps, Stock Markets and Negative Testing

– On Thursday, May 6, 2010, the Dow Jones index experienced a 1000-plus-point fall, followed by a rapid recovery of some 700 points. This event shocked traders, regulators, and the public alike. It came as a big surprise to many how a drop in stock prices (possibly a result of a data-input error,…

What Richard Told Rachel

– It was, in my opinion, another lost opportunity and a disappointment, I’m afraid. On her April 21, 2010 show on MSNBC, Rachel Maddow interviewed former special adviser for cybersecurity to the White House, Richard A. Clarke about his new book Cyber War: The Next Threat to National Security and…