The team I run at Microsoft is called the Connected Information Security Group (CISG) and we build software that powers the corporate information security program. We had some funny videos made that liven up internal presentations and meetings. I thought I would share them with you. This one is called “Tracking Risk”. Enjoy !
done
var vars = [...]
According to CNET, in an e-mail to the Linux kernel developer mailing list, Torvalds said a section of the security industry was dedicated to finding bugs in software only to publicize their findings and gain notoriety.
Torvalds wrote that disclosing the bug itself was enough, without having to label each individual security flaw. He added [...]
I am bored of the same old crap coming across my feed reader so I have decided to experiment; be ruthless and un-subscribe from anything that I don’t read (value) regularly and look for new fresh thinking and opinions. Sure the odd gem can be, well a “gem” and I may miss them but I [...]
At the OWASP Conference in Belgium this week I had a slide about checklists.
This is the story behind the slide. My boss at Microsoft has a friend who is a pilot. He did his pre-take-off checklist and was cleared to taxi onto the runway by air traffic control. He consulted his checklist one [...]
I opened the OWASP Europe Conference this week with a slide (below) about vendor neutrality.
In essence I urged attendees to consider the motivations of those presenting various ideas at the conference; including myself of course. During the conference it was pointed out that the moderator of a panel “The PCI 6.6 Dogfight - [...]
That’s right, its the Mesh. Security implications galore…..I hope there will be some amazing security SOA folks developing these apps.
It’s no real secret what I am doing at Microsoft although I haven’t really blogged about it much. I do plan to start in the coming weeks with some long posts about platforms, information security BPM, applying business management techniques to the information security discipline, dashboards and business intelligence etc.
Before I do that and hot [...]
Recent Comments