Posts RSS
Subscribe via Email
My 2 Obsessions this Week
Posted March 18th, 2008 by rybolov
If you're new here and would like to see more of what I'm saying, you may want to subscribe to my RSS feed (I can even email my blog posts to you when I publish a new one) or have a look at my papers and presentations page for downloads of stuff that you can share or "borrow heavily from". You also might find my guidelines for posting comments interesting, especially if you're a government employee. If you want to see me blog about anything in particular, drop me a private email on how you think I'm completely full of myself, extend me an invitation to speak at your next security meeting/event, or just to ship a huge bag of money in my direction, you can do that through my contact page. Thanks for visiting and happy hacking!
#1: How does a company/organization convert from doing compliance management to doing true risk management? I think it’s the difference between being good and being great. There are a couple of non-IT models that we can look at: Emergency Room care transitioning into long-term care being a good one.
#2: Compare and contrast the metrics that are collected as part of the annual FISMA reports with the major initiatives that we have on the table. They don’t add up.
OK, I think it’s time to go fish this weekend, I’m having dreams about LoB initiatives. Mini-me says I need to do something non-IT/security/$foo for the 8 hours of the day that I’m NOT working.
Posted in FISMA, Odds-n-Sods, Risk Management, The Guerilla CISO | 
3 Comments »
March 18th, 2008 at 10:23 am
About time’
March 20th, 2008 at 12:13 pm
Fishing pole…
April 2nd, 2008 at 12:52 am
Better late then never… But there is nothing wrong with being passionate about what you do as long as what you do doesn’t become who you are.
That’s my stab at a Hie-Co. I’ve had to physically unplug and get away to the mountains or get on my bike and just ride.
But the answer to number one is “Nuke the Planet it’s the only way to be sure”.