Mark Curphey - SecurityBuddha.com

Yes that’s right, I want your old polices and standards for re-cycling. We have revamped the ISM-Community and are about to kick it off later this week with an easier and simpler structure and lots of new features like mailing lists and a custom application to manage local chapters. Formal announcement before the end of [...]

A few months ago we launched the ISM Community. The aim was to create an online community similar to OWASP but focused on Information Security Management. There is no shortage of people wanting to participate, big companies (not vendors with agendas!) wanting to be actively involved, people ready to start meetings and crowds loitering but not [...]

Another guest article from Tim Smith (video here) to support the ISM Community Top Ten. Leave comments for Tim in the comments below!
Although this section is specific to Information Security Awareness training, it really stands true for whatever message you are trying to get across.
From an Information Security perspective though, having security policies is great, can’t [...]

Another guest article from Tim Smith (video here) to support the ISM Community Top Ten. Leave comments for Tim in the comments below!
Information Security is quite unique in its avoidance of quantifiable metrics to justify its position. Although this is changing, it’s still an oddity almost solely reserved for Information Security. Sometimes it’s perhaps looked on [...]

Another guest article from Tim Smith (video here) to support the ISM Community Top Ten. Leave comments for Tim in the comments below!
There is no shortage of people’s opinions as to what Risk Management is, in fact opinions in this area are like a certain part of our anatomy, everyone’s got one. I am therefore going [...]

Another guest article from Tim Smith (video here) to support the ISM Community Top Ten. Leave comments for Tim in the comments below!
As we have already discussed on the ISM-Community Top Ten, people generally want to do the right thing when it comes to following policies, procedures and processes. A process, by its very nature of [...]

I vote Tim Smith get his own blog and writes more great stuff like this. The 2nd guest article in as many days from him to support the ISM Community Top Ten. Leave comments for Tim in the comments below!
Make it Easy for People to Do the Right Thing (Policies and Standards Matter)
An interesting game [...]

This post is a guest post courtesy of Tim Smith who has taken over completing the ISM-Community Top Ten.
Use, Adopt and Align to Industry Standards
First up, don’t adopt a standard for standards sake. Certainly, one of the reasons for adopting a standard is so that you can compare your practices against a recognized baseline to [...]

A few people have asked me about my intentions towards the ISM-Community and its relationship to SourceClear (my early stage startup). I feel like I am on the first date and being asked by the father if I am going to sleep with his daughter on the way home from the movie. To avoid the family worrying unnecessarily, I [...]