I’ve spent more than 30 years in information security, and here’s a truth that still makes people uncomfortable: Information security isn’t really about information or security. It’s about people. But not just one kind of people. Every security incident—every breach, outage, or “technical failure”—involves three distinct groups of people, whether we acknowledge it or not: The people who make decisions — those who design systems,…
Look, if you thought things were messed up in cybersecurity when I wrote UNSECURITY back in 2019, buckle up—because they’re worse. Much worse. Despite pouring billions of dollars into tools, frameworks, and “solutions,” we’re still losing. Breaches keep happening, hackers keep winning, and the industry keeps spinning its wheels, pretending everything’s fine. It’s not fine. And I’m not here to sugarcoat it. That’s why Oscar…
Hey there, it’s time for episode 107 of the UNSECURITY Podcast! Just when you think you can’t get any busier… You get busier. Maybe if I learned to say “no” a little more often. My dilemma is 1) mostly brought on by myself and 2) is a blessing. It’s better to be busy than to have nothing to do, especially when you’re helping people. I’m…
Hey there, it’s time for episode 106 of the UNSECURITY Podcast! Short introduction today. Too much going on to get too wordy for now. We’ll just jump right in to the show notes, if you don’t mind. This is Evan, I’m leading the discussion today, and these are my notes… SHOW NOTES – Episode 106 Date: Tuesday November 17th, 2020 Episode 106 Topics Opening Catching…
Almost caught up with my conference and talk summaries from a couple weeks ago! Secure360 is arguably “the” security conference in the Twin Cities each year. 2019 was the 14thyear for the event and it was very well-attended. About Secure360 In the words of the Upper Midwest Security Alliance (“UMSA”): This marked the first year that the event was held at the Mystic Lake Center…