Leadership

Dec 142 min read

Leadership: One Day at a Time, One Step at a Time

One of the most profound, yet simple, acts of leadership I personally experienced was in the days after 9/11/2001. After the terrorist...

647 views

Oct 517 min read

Job Interviews: Part 2 Conducting the Security Interview - The Big 10

This is the second of two posts about interviews (the first post is here ). In this one I’ll focus on interviewing candidates and the...

3,722 views

Sep 2111 min read

Job Interviews: Part 1 Acing the Security Interview - 10 Top Tips

This is the first of two posts about interviews. In this one I’ll focus on interviewing for a role. In the next one we’ll look at how to...

3,688 views

Jun 18 min read

Incentives for Security: Flipping the Script

We’re getting it wrong on the messaging for incentives to do security - and people are pretending it’s landing when it isn’t. There are 5...

4,189 views

May 184 min read

The Crucial Test of Security Leadership: A-grades vs. Pass/Fail

A major success marker of great security leaders and their teams is one simple prioritization technique: the ability to know what needs...

2,427 views

Apr 2010 min read

Security and Ten Laws of Technology

There are many well known, so called, laws of technology. Moore’s law being particularly emblematic. Let’s look at some of them and see...

4,237 views

Feb 2413 min read

The Power of Community: 5 Steps to Fast-Track Your InfoSec Career

As we start out, or even when entering a new stage of our careers, we realize the need to be connected to a professional community. For...

2,627 views

Feb 105 min read

The 80 / 20 Principle

Ever since I first became familiar with the 80/20 principle, and other circumstances marked by Pareto distributions, I began to see...

3,283 views

Jan 279 min read

Leadership Transitions - 10 Steps for Success

Many of us have been through several leadership transitions in our careers. It could be a new role in the same or different organization....

3,278 views

Dec 30, 20235 min read

Top Ideas and Posts from 2023

Thankfully I managed to keep up the pace of 1 post every 2 weeks throughout 2023. Just when I think I might be running out of ideas, and...

2,049 views

Dec 16, 20233 min read

The Art of Influencing - 7 Steps

A critical measure of success for most security roles is the ability to influence. I’ve often found people think influence skills are...

4,849 views

Dec 2, 202310 min read

The Danger of Comparisons (There’s Always One Level Above)

No matter what you experience, what level of achievement, results or status you attain there is always something that might be perceived...

3,711 views

Oct 21, 202312 min read

Career Development: 13 Formative Moments (Part 2)

The skills for your role and your leadership style build up throughout your career. But I’ve found, personally and in talking to others,...

1,120 views

Oct 7, 202316 min read

Career Development: 13 Formative Moments (Part 1)

The skills for your role and your leadership style build up throughout your career. But I’ve found, personally and in talking to others,...

3,009 views

Aug 26, 20236 min read

Security Budgets - Supply and Demand

Unless you’re doing continuous or quarterly budgeting, which some organizations do, then you’ll no doubt be getting ready for the long...

4,289 views

Aug 12, 20234 min read

Building Balanced Security Teams - Updated

As an industry we spend a lot of time talking about workforce development and skills shortages. However, we tend not to talk about how to...

2,937 views

Jul 29, 202314 min read

Confessions of a Public Speaker - Tips for Security Practitioners

Many of us have to regularly speak in public at a range of events large and small, public and private, staged and ad-hoc. As your career...

6,002 views

Jun 17, 202319 min read

Work / Life Balance

I have always struggled to balance work and life. Many years ago I realized I wasn’t so much struggling to achieve an effective balance,...

9,018 views

Jun 3, 20238 min read

Delivering Security at Scale: From Artisanal to Industrial

Maturing a security program in any type of organization is not just to increase specific control effectiveness but also to increase its...

7,018 views

May 7, 202313 min read

The Illusion of Choice : A Review

In the last post we talked about the challenges and opportunities of using individual and organizational incentives to ensure effective...

3,655 views

RISK & CYBERSECURITY

Thoughts from the Field

Subscribe for updates.