- 
		
Recent Posts
 Look at Categories
Archives
- August 2025
 - March 2024
 - November 2022
 - October 2021
 - August 2021
 - June 2021
 - August 2020
 - December 2019
 - November 2019
 - October 2019
 - December 2018
 - September 2017
 - October 2016
 - March 2015
 - February 2015
 - January 2013
 - September 2012
 - August 2012
 - March 2012
 - October 2011
 - June 2011
 - May 2011
 - February 2011
 - December 2010
 - November 2010
 - September 2010
 - August 2010
 
Search the Blog
 InfoSec Governance- A Story of Parallels: Architecture and “Engineering Led” 16 August, 2025
 - Security Maturity vs Risk Based Security 24 March, 2024
 - Mandatory versus Guidelines: A story of FUD 21 November, 2022
 - A Little Tech – Reset Troubles with MFA 18 October, 2021
 - The Fear Mongers 11 August, 2021
 - Better Late than Never: My First Foray into Real Metrics 3 August, 2021
 - Three Key Patterns for Information Security Programs 2 August, 2021
 - The Fallacy of Permanence 16 June, 2021
 - DevOps is dead, long live Dev! 7 August, 2020
 - I Love the Subject of Change Control 17 December, 2019
 
Category Archives: IT Governance
Velocity vs. Anti-Velocity
No, its not the new anti-matter, or maybe it is. I’ve watched IT organizations now for 26 years. The sadness I feel is that I’ve continuously seen the same downward spiral: Failures are reacted to as a only that – … Continue reading
									
						Posted in IT Governance					
					
				
				
				Leave a comment
							
		In the beginning…
…there was a goal of teaching people how to communicate, interact, and learn from each other. When I wound up in InfoSec and IT Risk Management, my goal evolved into communicating to InfoSec professionals – IT Security Managers, CSO’s, Network … Continue reading