Archive for ‘Security Management’

6 results.
Oct26

Weighing in on the Counterpane acquisition

by Michael Farnum on October 26th, 2006 at 6:35 pm
Posted In: Business of Security, Managed Security, Outsourcing, Security, Security Consultation, Security Management

Everyone seems to be commenting on the Counterpane acquisition by BT.  But unlike most of the “analyst” type comments out there (here, here, and here), I want to comment about this acquisition from my not-too-long-ago viewpoint of a security manager. First all, with all respect to Mr. Schneier, I was never impressed with Counterpane.  They pitched to […] ↓ Read the rest of this entry…

4 Comments
Sep20

On the SSAATY Podcast – Selling Security UP!

by Michael Farnum on September 20th, 2006 at 9:25 pm
Posted In: Blogging Buddies, Business of Security, Friends, podcasting, Security, Security Education, Security Management

I forgot to mention that I was a guest panelist on Alan Shimel’s SSAATY podcast last night.  This was a great panel.  I had a great time, and I think we really hit some key points and offered some solutions to security admins and managers out there that need some help selling security to execs. […] ↓ Read the rest of this entry…

Comments Off
Sep14

Karn says we should all get out

by Michael Farnum on September 14th, 2006 at 4:26 pm
Posted In: Business of Security, Outsourcing, Security, Security Consultation, Security Management

Karn Griffen over at the the Information Security Gurus blog mentions my post about getting out of security management.  He has a good post today about how we should all be getting out of the front lines when there are so many possibilities with outsourcing.  He also commented on that same post, where he said […] ↓ Read the rest of this entry…

4 Comments
Sep05

One of the reasons I am getting out of security management…

by Michael Farnum on September 5th, 2006 at 11:16 pm
Posted In: Me, Overworked, Patching, Security, Security Management

…is crap like this.  I am honestly tired of having to worry about keeping up with the latest security flaw and making sure my IPS has the latest filters and trying to make sure my network admin is keeping the patches up to date and yada yada yada.  It just gets old. A while back, […] ↓ Read the rest of this entry…

7 Comments
Aug23

Reporting standard for SIM needs to be adopted

by Michael Farnum on August 23rd, 2006 at 11:09 am
Posted In: Security, Security Management

You’ve got anywhere from six to 60 security applications and tools in your data center, and most of them work pretty well. There’s just one problem: None of them speak the same language. ArcSight today attacked that problem by proposing a new log management standard, the Common Event Format, that could enable security devices and […] ↓ Read the rest of this entry…

2 Comments
Aug16

Security ROI

by Michael Farnum on August 16th, 2006 at 5:16 pm
Posted In: Business of Security, Security, Security Management

I just read this post by Richard Bejtlich at Taosecurity. Basically, a guy was trying to come up with an ROI for security, trying to show management where security adds value in actual dollars. Richard is correct that there really ain’t no such animal. I have never figured out a way to show my CEO […] ↓ Read the rest of this entry…

1 Comment