Author Archive
Russian Residuals
Dan’s response to incoming questions. . . Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . It’s about residual risk. A lot of people lately have been asking me if the world is on fire now that Russia is trying to attack us from a […]
My Take on the 36 Hour Rule
It doesn’t cover us. . . . . . but we’ll agree to it anyway. Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . I thought I’d write a quick DNL about the new 36 hour rule. It’s due in May, so I am not […]
The Magnificent Seven 2022
Seven Trends . . . that small bank Information Security Officers face in 2022 Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Welcome to the Magnificent Seven, my annual predictive article about the seven trends in technology that will impact the Information Security Officers of […]
Truth in Disasters, Part Two
Ransomware is not a threat. The threat is the APT. Ransomware is simply one of the many tools available to the APT. Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Our article about truth in disasters garnered a lot more initial views than we’re […]
Truth In Disasters
How Do We Know What We Know? Making Sure You Can Understand What Happened in an Incident. Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Until I reclined on my front yard, looking at the sky, following the instructions on how not to look […]
Why a SIEM Is Not a SIM
Why It Rhymes With SEEM (And its Not the I Before E Rule) Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . It’s the Gestalt. The idea that the whole is greater than the sum of it’s parts. That’s not something that is often brought […]
A Network is a Network . . . NOT!
Four Conditions … …For Why a Network Can be Anything But a Network! Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . I have to admit that infotex is being called into engineering meetings with larger organizations these days that are NOT community based banks. We […]
Risk-Based Authentication Practices
A follow-up on Dan’s 2008 Password Manifesto On the NIST Publication on Digital Identity Guidelines Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . In June 2017, NIST released a special publication on digital identity, NIST SP 800-63, that is starting to get the attention […]
The Risk of AI Risk
Or, the risk of email hypnosis . . . And the other implications of complacency! Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Now that the pandemic is coming to an end, most of us are returning to our daily commutes. Are you finding […]
Sometimes Say Sometimes
Another Manifesto A supply-chain manifesto by the author of Never Say Never: A Password Manifesto! Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . [Sssshh. Turn out the lights. Let’s lower our inner voices, as I have something to propose that might be a bit […]
