http://communities.intel.com/community/openportit/it/blog IT@Intel Fri, 13 Nov 2009 19:07:11 GMT Clearspace 2.5.9 (http://jivesoftware.com/products/clearspace/) 2009-11-13T19:07:11Z http://communities.intel.com/community/openportit/it/blog/2009/11/13/taking-back-the-security-initiative Threat agents maintain the initiative and we respond to restore balance. The bad guys innovate, find exposures, and use technology which they can leverage to achieve their objectives.  They take the first step, set the tempo, and lead this wicked threat security roi value rosi information_security intel_it strategy optimal matthew_rosenquist matthew rosenquist it optimal_security model risk it@intel Fri, 13 Nov 2009 19:21:37 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/11/13/taking-back-the-security-initiative 2009-11-13T19:21:37Z 2 weeks, 1 day ago http://communities.intel.com/community/openportit/it/blog/comment/taking-back-the-security-initiative http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12842 http://communities.intel.com/community/openportit/it/blog/2009/09/17/fortune-cookie-security-advice--confusing-security-measures-and-metrics--sept-2009 Measures generate data and metrics organize data to generate information.  The difference between ‘data’ and ‘information’, the former is something you know, the latter is something you use.   Everyone wants information security to be easy.  concern analysis value optimal rosenquist threat security matthew_rosenquist information fear corporate_security metric measure model matthew risk Thu, 17 Sep 2009 17:07:03 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/09/17/fortune-cookie-security-advice--confusing-security-measures-and-metrics--sept-2009 2009-09-17T17:07:03Z 2 months, 1 week ago 1 http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--confusing-security-measures-and-metrics--sept-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12568 http://communities.intel.com/community/openportit/it/blog/2009/07/31/fortune-cookie-security-advice--no-royal-road-to-security--july-2009 There is no Royal Road to understanding and achieving information security   Everyone wants information security to be easy.  Wouldn’t it be nice if it were simple enough to fit snugly inside a fortune cookie?  Well, although I don’t try to promote value concern matthew corporate_security analysis security information optimal model matthew_rosenquist rosenquist threat risk fear measure Fri, 31 Jul 2009 18:46:52 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/07/31/fortune-cookie-security-advice--no-royal-road-to-security--july-2009 2009-07-31T18:46:52Z 4 months, 7 hours ago http://communities.intel.com/community/openportit/it/blog/comment/fortune-cookie-security-advice--no-royal-road-to-security--july-2009 http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12405 http://communities.intel.com/community/openportit/it/blog/2009/06/23/can-optimal-and-flexible-security-be-mandated I was recently trading thoughts with Anton Chuvakin, a respected security metrics professional, in a philosophical discussion of perfection and quality of security.  Admittedly, I was on auto-pilot (operating without the benefit of coffee) rattling away model risk matthew_rosenquist openportpromo strategy optimal roi rosi information_security matthew security value optimal_security rosenquist Tue, 23 Jun 2009 17:51:04 GMT matthew.rosenquist@intel.com http://communities.intel.com/community/openportit/it/blog/2009/06/23/can-optimal-and-flexible-security-be-mandated 2009-06-23T17:51:04Z 5 months, 1 week ago 1 http://communities.intel.com/community/openportit/it/blog/comment/can-optimal-and-flexible-security-be-mandated http://communities.intel.com/community/openportit/it/blog/feeds/comments?blogPost=12287