Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.

Category Archives: Contingency Planning

Learned Lessons Are Not the Whole Picture

– I am certainly a strong proponent of learning from disasters, as asserted in my June 14, 2010 column “Cyber Lessons Learned from the Gulf Oil Catastrophe,” for example.   Consequently I felt somewhat vindicated in that view by an article by William J, Broad on the front page of the Science…

Cyber – The 13th Event?

– The featured topic on the cover of the June 2010 issue of Scientific American has the title “12 Events That Will Change Everything – And Not in the Way You Think.” The events, and the likelihood of them happening (according to the authors of the pieces on each event), are as follows, with…

Are Risk Models or Data to Blame? Yes!

– On the front page of the June 24, 2010 issue of The Wall Street Journal there is an article by Neil King Jr. and Keith Johnson with the title “BP Relied on Faulty U.S. Data.” When you turn the page (note that I’m reading the actual physical newspaper, not an electronic version, so I…

Black Swans … or Oil Victims?

– There is an article in The New York Times Magazine of June 6, 2010 by David Leonhardt with the title “Underestimating Risk: What the oil spill and the financial crisis have in common.” It is in a section called “The Way We Live Now,” and next to the section heading there is a drawing of…

Response to Gary Hinson

– First, you should know that I very much agree with and respect Gary Hinson’s approach to infosec. I have frequently quoted his definitive paper “Seven myths about information security metrics,” which first appeared in the July 2006 issue of The ISSA Journal, and which you can on the website…