security culture ⁽⁹⁾

Every month at my office, I hold an informal Lunch & Learn.  I take the opportunity to enlighten any of my colleagues who want to listen about some topic related to Information Security.  This is available to anyone in our IT operation who's interested, anywhere…

Bruce Schneier runs this annual contest called the Movie Plot Threat contest.  The idea is to poke fun at the way a lot of "security" is done, where instead of reducing real components of vulnerability like attack surface or complexity, people concoct insanely specific scenarios…

via SecMeme.com

I was in a meeting and someone from another company (but with a good reason to want to know) asked me, Does your organization respect the need for security or do they view the requirements you bring to them as an annoyance and a burden?…