http://communities.intel.com/community/openportit/it/blog IT@Intel Thu, 09 Jul 2009 17:09:21 GMT Clearspace 2.5.9 (http://jivesoftware.com/products/clearspace/) 2009-07-09T17:09:21Z http://communities.intel.com/community/openportit/it/blog/2009/07/09/the-sad-story-of-information-security-risk-metrics Risk metrics are the heart and soul of information security indicators.  An increasing proliferation of tools and assessments has emerged, attempting to quantify states of information security.  Given the nature of what is trying to be measured, this is openportpromo rosi roi value information_security threat measure security optimal_security model risk matthew_rosenquist matthew rosenquist metric Thu, 09 Jul 2009 17:27:47 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/07/09/the-sad-story-of-information-security-risk-metrics 2009-07-09T17:27:47Z 4 months, 3 weeks ago 1 http://communities.intel.com/community/openportit/it/blog/comment/the-sad-story-of-information-security-risk-metrics http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12333 http://communities.intel.com/community/openportit/it/blog/2009/07/07/explaining-the-value-of-security-spending--video Measuring the Return on Investment (ROI) of information security is challenging but not impossible.  It is important to understand the necessary components and how they interrelate.  In this brief video, I discuss one way of expressing value in relation optimal_security roi matthew_rosenquist rosenquist openportpromo risk security value rosi information_security model Tue, 07 Jul 2009 17:42:45 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/07/07/explaining-the-value-of-security-spending--video 2009-07-07T17:42:45Z 4 months, 3 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/explaining-the-value-of-security-spending--video http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12326 http://communities.intel.com/community/openportit/it/blog/2009/06/23/can-optimal-and-flexible-security-be-mandated I was recently trading thoughts with Anton Chuvakin, a respected security metrics professional, in a philosophical discussion of perfection and quality of security.  Admittedly, I was on auto-pilot (operating without the benefit of coffee) rattling away model risk matthew_rosenquist openportpromo strategy optimal roi rosi information_security matthew security value optimal_security rosenquist Tue, 23 Jun 2009 17:51:04 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/06/23/can-optimal-and-flexible-security-be-mandated 2009-06-23T17:51:04Z 5 months, 1 week ago 1 http://communities.intel.com/community/openportit/it/blog/comment/can-optimal-and-flexible-security-be-mandated http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12287 http://communities.intel.com/community/openportit/it/blog/2009/06/16/fortune-cookie-security-advice-strategic-competitive-secure--june-2009 Think strategic.  Act competitive.  Be secure.   Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote such foolish nonsense, I do security it@intel analysis secure matthew_rosenquist information_security openportpromo model threat optimal_security it value rosenquist strategy measure corporate_security intel_it risk Tue, 16 Jun 2009 21:12:49 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/06/16/fortune-cookie-security-advice-strategic-competitive-secure--june-2009 2009-06-16T21:12:49Z 5 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice-strategic-competitive-secure--june-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12277 http://communities.intel.com/community/openportit/it/blog/2009/06/12/strategy-for-sustaining-optimal-security Optimal security must not only be attained, but also sustained over time.  A good security strategy must be forward thinking to understand how intervention and continual maintenance will be needed, then implement those capabilities as part of a complete openportpromo it it@intel strategy model rosi matthew_rosenquist information_security corporate_security intel_it optimal_security roi security value risk rosenquist Fri, 12 Jun 2009 22:14:16 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/06/12/strategy-for-sustaining-optimal-security 2009-06-12T22:14:16Z 5 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/strategy-for-sustaining-optimal-security http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12269 http://communities.intel.com/community/openportit/it/blog/2009/06/11/sustainability-update-on-energy-use-in-the-office-proof-of-concept   Back in April I told you about a small proof of concept we were planning to measure energy use in the office environment and then use that established baseline to test different energy saving methods.   I thought it would be good to give you a office_energy_use energy sustainability it@intel openportpromo metering intel_it green it green_it Thu, 11 Jun 2009 18:20:10 GMT msbreton@intel.com http://communities.intel.com/community/openportit/it/blog/2009/06/11/sustainability-update-on-energy-use-in-the-office-proof-of-concept 2009-06-11T18:20:10Z 5 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/sustainability-update-on-energy-use-in-the-office-proof-of-concept http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12263 http://communities.intel.com/community/openportit/it/blog/2009/06/01/corporate-goals-ease-erp-efforts Intel uses the concept of corporate goals as a way to crystallize what is important across the company.  Every year the CEO and his staff agree on the big items Intel wants to achieve.  These are defined and grading is agreed on.  This is a great openportpromo intel_it it it@intel erp soren_andersen corporate_goals Mon, 01 Jun 2009 22:06:38 GMT soren.andersen@intel.com http://communities.intel.com/community/openportit/it/blog/2009/06/01/corporate-goals-ease-erp-efforts 2009-06-01T22:06:38Z 5 months, 4 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/corporate-goals-ease-erp-efforts http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12220 http://communities.intel.com/community/openportit/it/blog/2009/05/26/fortune-cookie-security-advice--may-2009 Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote such foolish nonsense, I do on occasion pass on readily digestible nuggets to fear corporate_security information_security measure optimal_security matthew_rosenquist openportpromo risk model analysis threat it value concern it@intel rosenquist intel_it security Tue, 26 May 2009 18:00:19 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/05/26/fortune-cookie-security-advice--may-2009 2009-05-26T18:00:19Z 6 months, 5 days ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--may-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12198 http://communities.intel.com/community/openportit/it/blog/2009/05/12/intel-it-adventures-in-ma The challenges for IT when handling an M&A project can be quite daunting to say the least.  But before we go down those winding, twisting roads, I'll start with an overview of the different types of projects we tend to come across related to M&A acquisition merger it openportpromo it@intel divestiture intel_it manda Tue, 12 May 2009 20:29:33 GMT chad.clemons@intel.com http://communities.intel.com/community/openportit/it/blog/2009/05/12/intel-it-adventures-in-ma 2009-05-12T20:29:33Z 6 months, 2 weeks ago 1 http://communities.intel.com/community/openportit/it/blog/comment/intel-it-adventures-in-ma http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12156 http://communities.intel.com/community/openportit/it/blog/2009/05/12/traps-of-measuring-security-risks We naturally take comfort in being able to quantify the vagueness of challenges in our existence.  This past week, I was again reminded the cup of information security is filled partially with the complexities of human perception and ambiguity of it@intel vulnerability risk threat information_security model matthew_rosenquist security rosenquist optimal_security analysis measurement measure openportpromo it intel_it Tue, 12 May 2009 20:29:15 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/05/12/traps-of-measuring-security-risks 2009-05-12T20:29:15Z 6 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/traps-of-measuring-security-risks http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12155 http://communities.intel.com/community/openportit/it/blog/2009/05/12/fortune-cookie-security-advice--april-2009 Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote such foolish nonsense, I do on occasion pass on readily digestible nuggets to it@intel model intel_it information_security openportpromo it security rosenquist strategy corporate_security threat attack attacker matthew_rosenquist risk optimal_security Tue, 12 May 2009 17:59:35 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/05/12/fortune-cookie-security-advice--april-2009 2009-05-12T17:59:35Z 6 months, 2 weeks ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--april-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12154