Joshua Goldfarb

I have had the privilege of meeting some great security analysts during my time in the information security profession.  One thing I experienced when...

I once worked for a boss who would often remind me that “if it isn’t written down, it didn’t happen.”  The more time I...

Defending is an Important Piece of the Security Puzzle Too Often Missing From the Broader Dialogue

The 1999 hit movie “Analyze This” can teach us a lot about the future of information security.  In the movie, the main character, Paul...

Stephen Sills’ 1970 single “Love The One You’re With” inspired me to write about a topic that I’ve been meaning to write about for...

Why Centralizing Enterprise Security Resources is Not a Great Idea

What is the point of analysis anyway?  Perhaps this sounds like a bit of a shocking or radical question, but I’d argue that it...

A few months back, I was a passive observer to an interesting email thread. People on the thread were discussing a breach that was...

Unlike the Common Cold, Security Professionals Have the Ability to Treat the Root Case of Problems

I haven’t met too many security professionals that don’t have enough work to do and are looking for more. This may seem obvious to...

Those who read my pieces regularly likely realize that I enjoy writing on topics around which I see a lack of clarity.  Whenever possible,...

If you read my pieces regularly, you might have guessed that approaching security operations and incident response in a strategic, holistic, and analytical way...