Tag Archives: risk

Cybersecurity Risk Metrics … Why Don’t They Get It?

April 17, 2017 – 6:00 am – The problem with cybersecurity is the metrics that are used to assess and manage security risks. In November 2008, I published an article “Accounting for Value and Uncertainty in Security Metrics,” in ISACA Journal, which subsequently won the 2009 Michael P. Cangemi Best Book/Best Article…
By | Posted in General, Risk Analysis, Security Metrics | Also tagged , , , , , , | Comments (0)

Is Risk Avoidance the Key?

November 21, 2016 – 6:00 am – My answer to this question is a resounding “yes.” But I don’t think that is the general view of cybersecurity professionals. After all, if business, government and other organizations pursued such a course, what would remain for cybersecurity folks to do? If you avoid the risk, then you…
By | Posted in General, Human Elements, Information Security News, Security in Popular Culture | Also tagged , , , , , , | Comments (0)

Security, Safety and the “Wall of Constricted Thinking”

September 23, 2013 – 6:00 am – There is an interesting article by Jack Hitt in “The Idea” column in the SundayBusiness section of The New York Times of August 18, 2013. It is about how a newly-minted astrobiologist, Meredith Perry, came up with an idea for charging devices wirelessly by combing through concepts from a…
By | Posted in CSO/CISO Perspectives | Also tagged , , , , , , , , | Comments (0)

Run More Risk Models Faster? … Maybe

May 29, 2013 – 6:00 am – Jim Goodnight, the co-founder and CEO of the SAS Institute has suggested (see Penny Crosman’s March 28, 2013 article “The Trouble with Banks’ Risk Models: Q&A with the Chief of SAS,” at…
By | Posted in General, Risk Analysis | Also tagged , , | Comments (2)

Risk and Human Frailty

May 9, 2013 – 6:00 am – My September 12, 2011 BlogInfoSec column “Risk Management – Scoring vs. Monte Carlo vs. Scoring” was about the subjectivity of risk assessments, where the term “subjectivity” was defined as one’s personal view of particular risks. I received some considerable push-back from the likes…
By | Posted in CSO/CISO Perspectives, Human Elements, Risk Analysis | Also tagged , , , , , , , , | Comments (0)