Well, if the book is about Windows XP, then yes.
but core concepts of security, CIA triad, etc., they are timeless. Well, not timeless, but you know what I mean.
First Ed. of 'Security Enginnering' by ross anderson is 8 years old. my guess is that at least 90% of it is still 100% relevent.
Re:Business types who refuse to listen to techies.
on
The Pragmatic CSO
·
· Score: 1
>>I'd be most interested in some examples of this 'disconnect' you talk about - how it is not tolerated in other industries.
Read some issues of HBR. Articles where the connect is best between the tech and biz people, profits are also better./jay
Re:Business types who refuse to listen to techies.
on
The Pragmatic CSO
·
· Score: 1
ok, so its not a perfect analogy, that does not map perfectly.
but.... in IT, there is way too far of a disconnect. you dont have such disconnect in other industries.
Re:Business types who refuse to listen to techies.
on
The Pragmatic CSO
·
· Score: 1
>>Executive management (except CIO/CSO obviously) shouldn't need to understand anything about the technical details.
Bull!! Imagine saying the head of a hospital shouldn't need to understand anything about the technical details. We would not tolerate this in any other industry, why IT????
Re:So who was the more pragmatic CSO?...
on
The Pragmatic CSO
·
· Score: 1
and that is the problem!!!
most cio's are completely clueless when it comes to security.
A CIO answers a security issue like this:
80% of the time: my sysadmin can do that 19% of the time: my firewall admin can do that 1% of the time: and this is the answer of the small minority of smart CIO'S: I will have my security engineering team do that.
Slashdot Mirror
dude, not exacatly a smoking gun......
presentation was in 2004 and book is written in 2008.
>>>ISC)2 which happened to pick a name for maximum confusion with legitimate groups
What is the confusion with a legitimate group?
you mean an MSSP :)
as to the 80's, i heard they were going to use pat benatar on the cover but could not get the rights :)
alas, the 7 seas are a verity of the past, mythology, there are certainly more than 7 seas now.
>>What I want to know is, how can I make my senior management care?
I take back my comment.
run a pen test and they will get it.
a good pen test team has at least a 95% success rate.
A really good pen test team has a 99% success rate.
Hack em and then scare them and then you got them!
>>>>What I want to know is, how can I make my senior management care?
Absolutely zero you can do.
either they get it and take action on it, or else they are clueless.
don't try to have them get security, if they don't get it, they won't.
published in 1990. Way before slashdot
didn't someone say above that this is NOT that type of book.
dude - different book
Well, if the book is about Windows XP, then yes. but core concepts of security, CIA triad, etc., they are timeless. Well, not timeless, but you know what I mean. First Ed. of 'Security Enginnering' by ross anderson is 8 years old. my guess is that at least 90% of it is still 100% relevent.
please, please please...
Tell me one thing in the book that is dated.
so what's your point?
not everyone is as smart as you, and well,
some people need a book like this.
if you don't like it, dont buy it.
better.... write something WE can use.
yeas, but the old threats are still used today.
>>I'd be most interested in some examples of this 'disconnect' you talk about - how it is not tolerated in other industries.
Read some issues of HBR. Articles where the connect is best between the tech and biz people, profits are also better. /jay
ok, so its not a perfect analogy, that does not map perfectly.
but.... in IT, there is way too far of a disconnect. you dont have such disconnect
in other industries.
>>Executive management (except CIO/CSO obviously) shouldn't need to understand anything about the technical details. Bull!! Imagine saying the head of a hospital shouldn't need to understand anything about the technical details. We would not tolerate this in any other industry, why IT????
Exactly!
my guess is that there are maybe 5 security pros in the US who know how to deal with ROSI.
All others make up their own data as they go along.
so be a man and tell me what it stands for.
17799 is soooooooooo important.
but way toooooo few people know about it.
no idea at all what you mean.
please explain.
and that is the problem!!!
most cio's are completely clueless when it comes to security.
A CIO answers a security issue like this:
80% of the time: my sysadmin can do that
19% of the time: my firewall admin can do that
1% of the time: and this is the answer of the small minority of smart CIO'S: I will have my security engineering team do that.
no one!!!! :)
SCO is the anti-pragmatic software company.
every company
every host
every every every
thing can be hacked!!!
isnt that what /. is all about?
speaking of people who use acronyms w/o (without) defining them...
what is TFS?