PLAYGOD.ORG

exploringpossibilityspace.blogspot.com

Exploring Possibility Space: Risk Management: Out with the Old, In with the New!

http://exploringpossibilityspace.blogspot.com/2013/08/risk-management-out-with-old-in-with-new.html

Musings on risk, innovation, data science and my PhD dissertation. Monday, August 26, 2013. Risk Management: Out with the Old, In with the New! In this post I'm going to attempt to explain why I think many existing methods of assessing and managing risk in information security (a.k.a. "the Old") are going the wrong direction and describe what I think is a better direction (a.k.a. "the New"). While the House of Cards metaphor is crude, it gets across the idea of interdependence. Here's my main message:.

i.playgod.org

Sony Pictures and risk management

http://i.playgod.org/sony-pictures-and-risk-management

Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Sony Pictures and risk management. December 08, 2014. What most of these pieces forget is that the issues highlighted for Sony Pictures are present if not prevalent in majority of large organisations. Kick them when they're down. Sony’s ‘information security’ team is...

i.playgod.org

Wassenaar Arrangement and dual-use computer code

http://i.playgod.org/wassenaar-agreement-and-dual-use-computer-code

Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Wassenaar Arrangement and dual-use computer code. July 14, 2014. The section on dual-use technology that’s relevant to software. The problem with the above statement, and the need to specify what intrusion software is that the equipments and components used for any o...

i.playgod.org

Soft power: the good, the bad, and the ugly

http://i.playgod.org/soft-power-the-good-the-bad-and-the-ugly

Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Soft power: the good, the bad, and the ugly. April 29, 2014. James Fallows’ summary of soft power. Is very useful for this situation:. Use of Russian tactics against Russian tactics. This passage refers to the following:. Special operations to mislead political and m...

exploringpossibilityspace.blogspot.com

Exploring Possibility Space: SIRAcon presentation

http://exploringpossibilityspace.blogspot.com/2014/10/siracon-presentation.html

Musings on risk, innovation, data science and my PhD dissertation. Thursday, October 9, 2014. I'm presenting at SIRAcon today: "How to aggregate ground-truth metrics and indicators into a performance index". It will be recorded and will be available to SIRA members on the SIRA web site. Here are the slides. Here is the blog post with background and tutorial. Subscribe to: Post Comments (Atom). You can follow me on Twitter here. My Google Scholar profile. Follow this blog on Twitter. Search this blog, lin...

i.playgod.org

Information security and the observer effect

http://i.playgod.org/information-security-and-the-observer-effect

Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Unstructured thoughts on cyber security, cyber warfare, information warfare, resilience, and all things risk management. Information security and the observer effect. July 10, 2014. The initial empirical study of the observer effect (Hawthorne effect), which said that. People change their behaviour to the better when observed. The second field study. Took the learnings from the first a...

exploringpossibilityspace.blogspot.com

Exploring Possibility Space: May 2014

http://exploringpossibilityspace.blogspot.com/2014_05_01_archive.html

Musings on risk, innovation, data science and my PhD dissertation. Thursday, May 1, 2014. Splitting this blog and moving to Octopress. I've decided to split this blog to separate my academic posts from my industry posts. I'm going to be blogging more about my dissertation and related works in progress, and I suspect that most of my industry readers won't be interested and I don't want to dilute my posts on industry topics - information security, risk, performance metrics, etc. Subscribe to: Posts (Atom).

exploringpossibilityspace.blogspot.com

Exploring Possibility Space: Mr Langner is wrong. Risk management isn't 'bound to fail'. But it does need improvement and innovation.

http://exploringpossibilityspace.blogspot.com/2013/09/mr-langner-is-wrong-risk-management.html

Musings on risk, innovation, data science and my PhD dissertation. Sunday, September 8, 2013. Mr Langner is wrong. Risk management isn't 'bound to fail'. But it does need improvement and innovation. In " Bound to Fail: Why Cyber Security Risk Cannot Simply Be 'Managed' Away. Feb 2013) and a recent white paper. Ralph Langer argues that risk management is a fundamentally flawed approach to cyber security, especially for critical infrastructure. Critiquing NIST CSF and his proposed alternative: RIPE. TL;DR ...

exploringpossibilityspace.blogspot.com

Exploring Possibility Space: I'm leaving Facebook (Frog escapes slowly boiling pot)

http://exploringpossibilityspace.blogspot.com/2013/09/im-leaving-facebook-frog-escapes-slowly.html

Musings on risk, innovation, data science and my PhD dissertation. Thursday, September 12, 2013. I'm leaving Facebook (Frog escapes slowly boiling pot). That's a frog on the handle. It was in the pot. But jumped out when things got too hot. I'm one frog that has noticed that the water in the Facebook pot is getting too hot. For comfort. I'm jumping out. The most recent privacy policy changes are the proximate cause (see this. The title of this post refers to the story of the Boiling Frog. Finally, I don'...