The NSA’s Threat to Information Security Culture

Over the past few weeks we’ve seen news coming out of the Edward (more…)

Cindy Kaplan2024-06-28T19:21:15+00:00Tags: Information Security, ISO, NSA, Snowden|

Your Policies Can Hurt You, Part 2: Overzealous Policies Can Create Breach-Prone Environments

Early on in my information security career I was auditing a firm that (more…)

Cindy Kaplan2025-06-17T19:42:15+00:00Tags: Audit, Governance & Compliance, Information Security, Personally Identifiable Information, PII, Policies|

Your Policies Can Hurt You, Part 1: The Importance of Well-Tailored Instructions

 

 

(more…)

Cindy Kaplan2025-06-17T19:44:33+00:00Tags: Audit, Compliance, governance, liabilities, Risk Assessment, risk management, security policies|

Why are Hackers Heckling the Director of the NSA?

The Hackers Heckling. The Black Hat convention is under (more…)

Cindy Kaplan2024-06-28T19:33:39+00:00Tags: General Alexander, Hackers, Information Security, InfoSec, NSA|

While Technological Security Risks Are a Possibility, Management Security Risks are a Certainty

Most of my information security focus these past few years has (more…)

Cindy Kaplan2026-03-23T14:26:21+00:00

• 

Risk Acceptance Levels: Managing the Lower Limits of Security Costs

 

Last week I presented a topic here at Halock’s blog site (more…)

Cindy Kaplan2025-06-17T19:51:06+00:00Tags: impact, Information Security, reasonable and appropriate, risk, Risk Assessment, risk management, risk register, the hand rule|

Has The OWASP Top 10 Been Effective For Web Applications?

OWASP just released a (more…)

Cindy Kaplan2024-08-01T20:29:49+00:00Tags: application development, application security, OWASP, vulnerabilities|

• 

The Hand Rule: Managing the Upper Limits of Security Costs

While presenting a talk at CAMP IT last week I got (more…)

Cindy Kaplan2025-07-22T17:07:09+00:00Tags: burden, hand rule, HIPAA, likelihood, negligence, NIST 800-30, Reasonable, reasonable and appropriate, Risk Assessment, Risk Treatment, security control|

Summary of the 2013 IP Commission Report

(more…)

Cindy Kaplan2025-05-20T16:35:02+00:00Tags: China, hacking, intellectual property, IP Commission|

We Need a Risk Management Tipping Point

While preparing for a keynote talk at CAMP IT that is (more…)

Cindy Kaplan2024-08-13T20:30:46+00:00Tags: HIPAA, inefficiency, Information Security, Risk Assessment, risk management, security, SOC 2|