Blog

There is an good article on CIO Central: Are You Focused On The Wrong Security Risks? An interesting discussion, and I partly agree that we have to challenge the way we look at the security risks. I would even broaden the questions he raises. When I talk about industry trends that impact your ris ...

I am not satisfied with the way we (in the industry) are doing risk management. In my early days, before I was actually entering the security space, I was doing project management and as part of it, risk management. The way we did it was fairly simple (as probably most of you do): We had an impact o ...

This is quite a normal scenario: A zero-day pops up on the Internet by a security researcher. Immediately afterwards we see the first exploits appearing and being integrated into the different attack tools. Now, the race has started: The vendor has to develop a security update, the criminals try to ...