Recent Comments
Author Archives: dutcherstiles
InfoSec Compliance & Complex Systems: Part 1 – Clinging to the Nearest Passerby
This Saturday I assemble my raiments and get hooded as a Master of Science. In partial fulfillment of the requirements for the degree, I wrote, re-wrote, heavily edited, and finally collected signatures on my report on information security, compliance, and … Continue reading
Posted in Uncategorized
1 Comment
Valid University ID
I recently began classes at graduate school at UT in the Masters of Science in Identity Management and Security. On the first day of orientation, there was an alignment of my interests and the focus of the program as the staff … Continue reading
SiRACON 2015 – He wanted to stay home; Wish someone would phone
What I learned in Detroit. It was all good. @societyinforisk Continue reading
Bingo
Best Practice The details are too boring to recount. Impossibly large amount of records “exposed” due to human error. Nothing new, same old. The only reason to watch is to see how the impact plays out. It is Texas Politics, … Continue reading
Posted in Uncategorized
Tagged chicken shit bingo, comptroller, dale watson, data privacy day, identity theft, incident response
Leave a comment
Up Yours
Nice metric courtesy of Grits – the costs of false alarms. And the casualties found at the intersection of reliable metrics and public policy. To quote Grits: But as [Former Dallas Police Chief] Kunkle says, this is an instance where tuff-on-crime … Continue reading
Audit Drips
I was catching up on the podcast backlog today. I listened for the first time to the Risk Hose, which had a meaty midsection on the internal auditing profession, and whether and how internal auditors assess, analyze and otherwise manage … Continue reading
The Professional
An interesting narrative, trapped unfortunately behind a pay wall, comes from the Chronicle of Higher Education – “Chapel Hill Researcher Fights Demotion After Security Breach” A cancer researcher’s database of gets potentially pwnd (two years from incident to discovery), spurring the … Continue reading
Posted in Uncategorized
Tagged breach notification, computer forensics, crime, data breach, medical privacy, privacy, security, standards
Leave a comment
Risk a Harm?
Interesting post and comments on privacy risk from Solove at Concurring Opinions. Despite being raised by a pack of feral solicitors, I can’t claim to understand all the legal theories involved. I’m attracted to the liquidated damages idea for a … Continue reading
Posted in Uncategorized
Tagged privacy, reputation risk, risk assessment, ssns, wsbk
Leave a comment
The One In Five 