Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.

Tag Archives: Industry Commentary

Skype’s 2-day outage: Availability, Who Gives a Damn?

– The infosec field commonly defines availability as: assurance in the timely and reliable access to data services for authorized users. It ensures that information or resources are available when required. It seems that Stephen Baker of Businessweek has a different standard: Are communications…

Email from Dr. Lawrence Gordon: Security ROI possible but not optimal, use other metrics

– Due to the discussions produced over the last few days, I took the time to ask Dr. Lawrence Gordon and Dr. Martin Loeb their opinion on the security ROI issue. For those of you who do not know, Gordon and Loeb wrote the book Managing Cyber Security Resources: A Cost-Benefit Analysis. I’d…

An Open Email to Mike Rothman on Security ROI

– Hey Mike, I read your post yesterday, but there is a slight bug in it! My blog post you cite was referencing Richard’s post entitled “Are the Question Sound?“, not the security network monitoring case study. In “Are the Question Sound?” Richard tries to give a…

Could distributing a gmail Username/Password = .mp3 trading?

– Distributing songmashups by uploading .mp3s as individual emails and then distributing the usernames and passwords to the account may be the next big thing according to Esquire: On June 28th, someone anonymously created an account called songmashups@gmail.com, e-mailed 31 songs to the account,…

CEOs: IT Risks are more important to business than Terrorism

– Inc.com Natural disasters and terrorism don’t worry CEOs as much as an IT systems collapse, according to a report by the Economist Intelligence Unit. The SAP-sponsored study showed that nearly a third of the 145 international senior executives surveyed listed IT systems collapse as their…