& Blogs
News & Blogs
August 14, 2017
Cyber Security: targeting
“Only amateurs attack machines, professionals target people” Bruce Schneier
June 29, 2017
Cyber Security: attack surface
In my last post I discussed some of the wider aspects of cyber security in an attempt to abstract the discussion from pure IT security. This time around I thought it would be helpful to delve into a couple of concepts that make it easier to focus our limited defences rather than trying to defend against all the threats all of the time. Cyber defence is a zero-sum game and time spent doing one thing means it can’t be spent doing something else.
June 1, 2017
Cyber Security: let’s talk about terminology
A few years ago I was on the team that developed the UK’s Cyber Doctrine for the Ministry of Defence. One of the first tasks was to agree on a common lexicon, then map similar terms across different organisations and discard any legacy terms to avoid confusion. No other government department had decided to implement a common framework for cyber security, let alone define a common language to be used. This was a bit of a first.