Following the Wh1t3 Rabbit - Practical Enterprise Security

Enterprise Security organizations often find themselves caught between the ever-changing needs of the agile business, and the ever-present, ever-evolving threats to that business. At the same time – all too often we security professionals get caught up in “shiny object syndrome” which leads us to spend poorly, allocate resources unwisely, and generally de-couple from the organization we’re chartered to defend. Knowing how to defend begins with knowing what you’ll be defending, why it is worth defending, and who you’ll be defending from… and therein lies the trick. This blog takes the issue of enterprise security head-on, challenging outdated thinking and bringing a pragmatic, business-aligned, beyond the tools perspective … so follow the Wh1t3 Rabbit and remember that tools alone don’t solve problems, strategic thinkers are the key.

Rafal (Principal, Strategic Security Services)

Technical Debt vs. Managed Technical Debt [guest-post]

This post is from a guest-blogger, Dan Houser, who read one of my previous posts and decided to expand on the point and add his own viewpoint on managed versus unmanaged technical debt ... it's a very interesting read I encourage you to take a minute to consume...

Technical Debt vs. Time-to-Market (using the Evernote breach as an example)

It's hard to find someone who will argue that technical debt isn't a valid reason to do security (or really, any type of defects) fixes early and often. The further away from the point of origin, the more expensive - and this is definitely a valid argument except when it comes to a few edge cases... and then technical debt is gladly paid.

The Ultra-Legacy Problem - Systems so old...

"That application is so old..." may sound like the start of a hilarious IT joke, but trust me if you've ever had to deal with one of these ultra-legacy systems - systems 10, 15, or more years old - then it's no laughing matter. In this post I'll discuss some of the issues with ultra-legacy systems...

Search
About the Author(s)


HP Blog

HP Software Solutions Blog

Community Announcements
Follow Us
Labels