Rafal Los

As the enterprise security function matures, two things act as the main driving forces on strategic priority. As security leaders shuffle resources, organize budgets...

Let me ask you a very simple question.“What is your organization’s sensitive data, and where is it?” 

In spite of heroic efforts, many companies today offer attackers no shortage of vulnerable points for entry into their networks. Whether it’s cloud services...

Strategy without the ability to execute is destined to fail, and execution without forethought will face the same fate.Most individuals find it difficult to...

Do You Have a Security Policy for "IoT" Gadgetry in the Office?

Having spent a significant amount of time on process design recently, the importance of balancing process inputs and outputs is clear to me. In...

Everyone is talking about the shortage in security talent. Literally, everyone. It’s not for naught though, when you look at the sheer volume of...

Many people in security are talking about “risk.” But like Inigo Montoya says, “You keep using that word, but I do not think it...

With enough data, any problem can be understood. Solving it is another matter.

As part of my day job, I have the distinct pleasure of studying enterprise security programs – or at least slices of them –...

My twins, at almost 21 months old, are absolutely in love with Curious George. If they’re ever having a bad day, in the middle...

The Higher the Value of the Intellectual Property of Your Enterprise, the Higher the Likelihood You will Experience an Insider Incident

While serving as a security leader, how often have you heard or have yourself said, “If only the executives would pay attention to me?”

One of the things I have observed that is missing the most in the security field is structure. Security leaders struggle to replicate successes...

For many reasons you’ve heard and read about, security is a very difficult space. Prioritizing is an unenviable job many security professionals must do...

It’s time for RSA Conference again. That annual gathering of enterprise security professionals, technology manufacturers and solution providers, and partygoers, where you will find...

Every time we go through one of these panic-patch cycles – think Heartbleed and Shellshock – the security industry laments about difficultly of the...

Having spent a considerable portion of time in the security industry, I’ve learned a thing or two along the way including that some of...