Joshua Goldfarb

In security, whether to build or buy a given solution is one of the oldest questions. I was most recently reminded of this question...

The catch phrase “intelligence-driven security” has never sat particularly well with me. Those who have read my pieces or have heard me speak may...

As cliché as the saying is, it is quite true that we live in a global world. It’s not uncommon for a large enterprise...

Recently, at an event in Las Vegas, one of the speakers polled the audience.  When he asked the question, “How many people lost money...

We’ve likely all heard the phrase “complexity is the enemy of security” many times. It’s an oft-used sound bite, but what can we learn...

It’s okay to fail. This may sound radical, but I would argue that the information security community isn’t failing enough. Or rather, we as...

Sometimes, it seems that talk of “big data”, “security analytics”, and “big data security analytics” is everywhere. I can’t recall the last security conference,...

People who know me know that I love to ask questions. In fact, people sometimes ask me: “Why do you always answer a question...

Budget is Not a Metric, But Rather a Means to Address Operational Security Requirements

More Signal, Less Noise! With a Large Volume of Even the Highest Priority Security Alerts, Analysts Cannot Successfully Review Each Alert

In my previous column, I discussed the “So What Factor”, which reminds us that we must know our audience.  Many of the people we...

While There are Exceptions, Most Business Executives View Security as a Necessary Evil...

In Security Operations, Less Is More. Incident Response Teams Should Focus on Data Value Instead of Data Volume.

Recently, at a round table discussion, I heard someone make the statement, “In five years, there will be no more security analysts. They will...

What Can we do Once we Identify the Root Cause? We Can Work to Address it. 

There is no shortage of headlines these days detailing breaches, Advanced Persistent Threats (APTs), and other such attention grabbing topics. The details vary in...

Framing the Challenges in the Security Realm Properly is an Important First Step in Addressing Them

In Physics, the event horizon of a black hole is the point at which the black hole’s gravitational pull becomes so great that nothing...