Sober Security

The security industry often tries to do everything instead of putting focus on a singular area where we can make a real difference. This is a sign of an immature industry.

The idea of having a few people who can do a little bit of everything isn’t really working anymore. We’re all too busy to be effective.

We have far too closed of a mindset when we handle security problems.

Do you really want to keep solving the same security problems forever?

If something happens you’ve never seen before, how do you know what to do next?

And if awareness isn’t enough, is it time to look at our problems in a new way?

There isn’t a skills shortage for security because these are skills you can’t teach.

A new service from GitHub is going to change how we build software. Again.

If you can’t measure it, it’s not actionable. If it’s not actionable, it’s not useful. And if it’s not useful, is it actually advice?

When the business leaders start to ask questions about how the organization’s security looks, it’s time to make sure they grasp what’s going on and what needs to happen, so we can do it right.

When it comes to cybersecurity, why does it feel like everything is on fire all the time?