Category Archives: Uncategorized

The Red, Yellow and Green Legos of Judgment

I’m out here in Coyote and Roadrunner land, knee deep in internal auditing. I co-presented yesterday on privacy, as a co-author of an Institute of Internal Auditing publication.It’s been a interesting couple of days, driven in part by the isolation … Continue reading

Posted in Uncategorized | Tagged , , | 1 Comment

Apocalypse Pooh

It’s a grim world around us. A mass murder turns into a cynical ploy to promote and condemn any issue you care to name, or exploit the grief for naked profit. How can I deal, in the short term, except … Continue reading

Posted in Uncategorized | Tagged | Leave a comment

Sweet Fancy Moses

Lots of odd stuff (mostly from Pogo & Fergie): Why Justice Went Blind The courthouse security folks in El Paso County can see you nekkid.“The new machine will not replace the metal detectors already in use at the judicial complex. … Continue reading

Posted in Uncategorized | Leave a comment

In defense of controls

Alex is pretty down on ISO 17799. I think the reasons are that he sees organizations substituting ISO 17799 for risk management FAIR style. Instead of calculating a realistic, customized risk profile, an organization pulls ISO 17799 (or COBIT, though … Continue reading

Posted in Uncategorized | 3 Comments

Invincible

New York Magazine article “The Young Invincibles: A Generation Uninsured” discusses the way uninsured 20-30 year olds in New York deal with health risks (link and commentary from Concurring Opinions.) The article is interesting study of people who do not … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment

One Man’s Trash

The righteous fury of Texas Attorney Abbott was last month stymied by an elite cadre of county clerk ninjas who conjured a shambling legislative behemoth to crush his valiant effort to protect the privacy of Texans.Abbott screwed his courage to … Continue reading

Posted in Uncategorized | Tagged , , , , | Leave a comment

Auditing Privacy Part 2 – Risk Assessment of Data Loss

The easy way to assess privacy risks is to focus on the impact of data theft to the organization by including the private data as a corporate asset. There are well documented methods to identify the vulnerabilities in means of … Continue reading

Posted in Uncategorized | Tagged , , , | Leave a comment

Impacted Molars II

OcclusalPanopticonistas Cyveillance say ID theft is so bad, we are all going to die. Seems like shutting down copyright scofflaws got a little too Web 1.0 for them, so they’ve unleashed their vicious crawling spiders on a search for contraband … Continue reading

Posted in Uncategorized | Tagged , , , , , | Leave a comment

Insider Threat Assessment

Step one: Play a crappy new-agey cover of “All Along the Watchtower.”

Posted in Uncategorized | Tagged , | Leave a comment

Panopticon Enabled Desktops Increase Productivity!

From Dark Reading, the joys of workforce monitoring software with Ascentive!: “We call it ‘workforce activity management,’” says Schran. “Our latest edition provides all the insight necessary to eliminate time-wasting, increase productivity, and protect private company data.” Or, in the … Continue reading

Posted in Uncategorized | Tagged , , | Leave a comment