Welcome to Collaborative Strategy Guild

Where insights are transformed into actions at the intersection of collaboration, information management, security, and business strategy.

How Red Meat can make Cybersecurity Healthier

Recently, the L.A. Times and other places wrote about a study done by Dr. Walter Willett of Harvard, et.al. regarding the impact of red meat on one’s mortality. He found that eating as little as one extra serving of red meat a week contributed to a 13% or 20% increased risk of death. More specifically, they found that

“After multivariate adjustment for major lifestyle and dietary risk factors, the pooled hazard ratio (HR) (95% CI) of total mortality for a 1-serving-per-day increase was 1.13 (1.07-1.20) for unprocessed red meat and 1.20 (1.15-1.24) for processed red meat.”

As with many studies about diet, lifestyle, and death, this one has sparked discussion. The Numbers Guy from the Wall Street Journal,… Continue reading: How Red Meat can make Cybersecurity Healthier

RSA Conference 2012 – The Sessions I Don’t Want to Miss

The sessions I don’t want to miss (but probably will). These sessions all strike my fancy in some way, and I would love to make it to them. Some are time competing and others take place after I am gone, but I wish I could attend. There are at least two that I am sure I will attend:

Session Code: P2P-108C
Session Title: Where will InfoSec be in 2020?
Facilitator: Pete Lindstrom Research Director
Spire Security
Scheduled Date(s)/Time(s): Tuesday, February 28 03:50 p.m.
Room 112
Session Length: 50 minutes
Session Abstract: Take off your flak jacket and put on your thinking cap. It’s not often we get to be… Continue reading: RSA Conference 2012 – The Sessions I Don’t Want to Miss

HIT security: conclusions in a “contradictory report”-sandwich?

The Ponemon healthcare study, the Second Annual Benchmark Study on Patient Privacy and Data Security (sponsored by ID Experts), has been gaining quite a bit of attention in the press and in the blogosphere over the past few days.

Overall, it’s an interesting report (as most Ponemon reports are). And I for one am pleased that folks out there are interested enough in the intersection of HIT and security to go out and read it… even more pleased that so many people find the topic interesting and valuable enough to write about it.

But all that being… Continue reading: HIT security: conclusions in a “contradictory report”-sandwich?

My Dream Metrics Status Report

“Last month, our IT and information assets generated $20 million in revenue in support of 15,000 people using 350 applications. To accomplish this feat, over 32 million connections were attempted across our systems and we applied specific control measures an average of 2.4 times per connection to ensure the completeness and accuracy of our transactions. As a result, over 4 million connections were blocked instantly for not meeting our basic requirements (with 99.75 percent success rate) and we identified 1,700 suspect connections that required further analysis. We ultimately determined that five of those 1,700 were attempted intrusions which we subsequently acted upon according to established procedures. There were no losses associated with the incidents.”

“Last month’s activity has brought to light… Continue reading: My Dream Metrics Status Report

Thinking about APTs and the RSA Hack

The recent RSA hack has once again (after Google and Aurora made a big splash a little over a year ago) brought to the surface this notion of an “advanced persistent threat.” There is great emotion on all sides of the debate about what it is and whether it matters. As I listened to Uri Rivner of RSA describe the nature of the attack on Friday, for some reason I couldn’t stop thinking about The Cuckoo’s Egg, which was a fascinating account by Clifford Stoll of how he tracked down an industrial espionage ring. Back in the early-mid 80′s. Over 25 years ago.

Of course, the attackers didn’t use spear-phishing then, but the idea of the “APT”  as an adversary was… Continue reading: Thinking about APTs and the RSA Hack