• 28 Feb 2011

    Security talent ≠ security success

    Here's one of those great quotes that applies directly to infosec:“Talent is cheaper than table salt. What separates the talented individual from the successful one is a lot of hard work.” -Stephen KingThere are plenty of people who understand security architecture, hacking and related technical issues but few who really get the essence of risk and have taken the necessary steps to make information security work in support of the ...

    Continue Reading...
  • 08 Feb 2011

    Principles are not values

    When I started my information security consulting business 10 years ago I believed the words "principle" and "logic" would be a good fit for the way I think and work. The concept and mode of operation has worked out great. I was just reading a quote by Stephen Covey that reminded me of this - and information security leadership in general...he said:"Principles are not values. A gang of thieves can ...

    Continue Reading...
  • 31 Jan 2011

    It’s hard being human

    Cavett Robert once said something about character that resonates within information security - especially regarding ongoing management and leadership. He said:"Character is the ability to carry out a good resolution long after the excitement of the moment has passed." When I saw this I was reminded of how pumped you can get when attending a show like RSA or CSI or how neat certain vendor marketing spiels sound. Another is ...

    Continue Reading...
  • 20 Jan 2011

    Skill to do comes of doing

    Ralph Waldo Emerson once made this statement which completely and totally applies to what you do in your job and how you develop your career over the long haul:"Skill to do comes of doing."As with surgeons, home builders, mechanics, race car drivers and so on...we learn most by doing.I know a lot of people are going back to school and focusing on getting their degrees and certifications right now. There's ...

    Continue Reading...
  • 11 Jan 2011

    What’s holding you back?

    Orison Swett Marden once said:"What keeps so many employees back is simply unwillingness to pay the price, to make the exertion, the effort to sacrifice their ease and comfort." So true...as the saying goes good enough hardly ever is....

    Continue Reading...
  • 10 Jan 2011

    Great quote on information security choices

    Here's a great quote by Fred Smith that says it like it is:"You are the way you are because that's the way you want to be. If you really wanted to be any different, you would be in the process of changing right now."Obviously this also applies to our careers and personal lives...Like calories we ingest, our choices add up dramatically over time....

    Continue Reading...
  • 05 Jan 2011

    Speaking of supererogation, here’s a great quote

    Regarding yesterday's post about the word supererogation and how it can help you in your infosec career, here's a great quote by the poet Ovid that supports such an approach:"Make the workmanship surpass the materials." Spot on...otherwise you just fall in line with the majority. Not good for your career, not good for business....

    Continue Reading...
  • 19 Nov 2010

    Just how much control are we willing to have forced upon us?

    It's been an interesting and truly scary news week in the "good old" U.S. of A. Think about this stuff folks:A Democrat congressman in charge of the House Ways and Means Committee with jurisdiction over taxes gets reprimanded for not paying taxesA judge is busted for buying drugs to use with a stripperSan Francisco banning circumcision and toys in Happy Meals And, of course, TSA minions doing things like giving ...

    Continue Reading...
  • 18 Oct 2010

    Is this quote one of the contributing factors to lax infosec?

    Novelist Robert Heinlein once said "In the absence of clearly-defined goals, we become strangely loyal to performing daily trivia until ultimately we become enslaved by it."I suspect this is a large contributing factor to the lack of information security - and subsequent data breaches - in business today.Feel like you need a jump start on goal setting? Check out this piece I wrote on the subject:Eight steps to accomplishing your ...

    Continue Reading...
  • 27 Sep 2010

    It all goes back to choice

    I've said it before and I've come across a quote that prompts me to say it again. Peter McWilliams once said "We are all, right now, living the life we choose."The same goes for security...and compliance...and overall business risk. The sum of your business decisions up to this point define exactly where you are right now.As Og Mandino said "Use wisely your power of choice." As I've discovered it's hard ...

    Continue Reading...