Tag Archives: risk
Risk and Human Frailty
May 9, 2013 – 6:00 am
–
My September 12, 2011 BlogInfoSec column “Risk Management – Scoring vs. Monte Carlo vs. Scoring” was about the subjectivity of risk assessments, where the term “subjectivity” was defined as one’s personal view of particular risks. I received some considerable push-back from the likes…
The Meaning of Risk, the Universe, and Everything
May 29, 2012 – 6:00 am
–
The title of this column paraphrases the question “What is the meaning of Life, the Universe, and Everything?” asked of the mega-computer “Deep Thought” in Douglas Adam’s book, The Hitchhiker’s Guide to the Galaxy. After 7 ½ million years of calculation, the computer came up with the…
InfoSec Defenders are “Losers” per RSA
March 26, 2012 – 6:00 am
–
The annual RSA Conference in San Francisco is a great event for meeting and greeting, A record of some 20,000 visitors was claimed to have attended the latest conference during the last week of February, 2012. Visitors have an opportunity to see and touch the latest vendor creations in one place…
The Personalization of Risk
December 19, 2011 – 6:00 am
–
I realized when I received several comments regarding my September 12, 2011 column “Risk Mismanagement – Scoring vs. Monte Carlo vs. Scoring” from Doug Hubbard and others, that I hadn’t been clear enough in my description of what I had termed “subjective risk.” It also seems that it…
The Security of Fools
November 21, 2011 – 6:00 am
–
No, I’m NOT saying that security professionals are fools … far from it. But many of the folks whom they serve may well be overconfident in their judgments about security. Overconfidence in the face of undisputable evidence to the contrary is described in Daniel Kahneman’s article “The…
