• 14 Aug 2008

    But if knowledge relies on information, then…

    I was thinking some more about the knowledge=power equation. To have knowledge we have to have information, right? But information is also a weakness in the context of the work we do, agreed?So, does weakness=power? I don't know for sure...Having trouble wrapping my head around this. I never really did all that well in Algebra anyway. ;)...now back to work....

    Continue Reading...
  • 17 Jun 2008

    Thought for the day on security policies

    Here's an interesting quote I just came across that fits nicely into the mold of security policy management and enforcement:"The test for determining the scope of this provision must not be subject to manipulation by those whose power it is designed to restrain." - from the Supreme Court's decision restoring the writ of habeas corpus...

    Continue Reading...
  • 24 Mar 2008

    How do you eat an elephant?

    One bite at a time, of course. Don't ever forget this when it comes to tackling big information security projects, writing your first article, putting together an important presentation, going down the path of writing a book - whatever. The day-to-day "little" stuff seems boring and unimportant but it's not. Here's a good quote that sums it up:"You have to put in many, many, many tiny efforts that nobody sees ...

    Continue Reading...
  • 24 Mar 2008

    Thoughts for the day on taking control of your security career

    We all need a little inspiration every now and then. Here was mine for today. Learn to think this way and nothing can get in the way you succeeding in information security:"People are always blaming their circumstances for what they are. I don't believe in circumstances. The people who get on in this world are the people who get up and look for the circumstances they want, and if they ...

    Continue Reading...
  • 20 Mar 2008

    Thought for the day on effecting change

    I just came across this great quote by Anthony Robbins which can apply to your security career or to your organization's overall security - really anything in life:"If you do what you've always done, you'll get what you've always gotten."Love it!...

    Continue Reading...
  • 25 Jan 2008

    Thought for the day on what security really is(n’t)

    "Security is mostly a superstition. It does not exist in nature. Life is either a daring adventure or nothing." - Helen KellerAlong the same lines of this week's post on personal security vs. information security....

    Continue Reading...
  • 08 Jan 2008

    Thought for the day on security getting in the way

    Here's a great quote I was reminded of that made me chuckle thinking about how information security controls often result in the same outcome...From the business master himself:"Most of what we call management consists of making it difficult for people to get their work done." -- Peter Drucker...

    Continue Reading...