legal defensibility

Time to stop blaming the victim, part deux

It started a couple weeks ago with the almighty Bruce Schneier expressing a rather controversial opinion: ...[that] training users in security is generally a waste of time, and that the

Taking the bait

In a recent blog post, Jeremiah Grossman asks, I also often wonder what it will take to influence a shift information security spending habits from one of tradition to efficacy.

bit.ly considered harmful (or: let's stop blaming the victims)

 A colleague, whose company had suffered from a sophisticated security breach last year, recently shared with me some of the awareness materials that