I was privileged to be asked to present at the Information Age Security Leadership on the 12th March. Whilst I have a significant responsibility for security, I’m also conscious that when presenting to an audience who have chosen to attend a security event, I’m usually in the presence of far greater expertise than I can offer. As a […]
A little light reading from Security Leadership 2015 Read More »
Individually, we simple humans find risk a hard concept to manage. And if that’s true of individuals, it’s also true of groups which explains just why selling increased security or DR budgets to your executive Board is hard, and why actuaries are so well paid. Bruce Schneier’s excellent post on perceived and actual risk is a great place to begin exploring how
Humans suck at understanding risk. Or do we? Read More »
Passwords really are awful. I could write an entire post about what an awful concept the password is to base our entire security paradigm on. Yet, still they persist, in the face of constant and public evidence that they don’t really work. They are particularly flawed because they are just not designed for people to use –
Passwords are useless Read More »