Cyber Hygiene

People simply trust other people

This excellent November piece from McKinsey on cyber security deserves a comment (“A Framework for Improving Cybersecurity discussions within Organizations” – Jason Choi / Harrison Lung / James Kaplan).

Security is not about “enabling” the business but “protecting” it

At the end of a keynote speech I gave at the excellent CIOWaterCooler LIVE! Event in London on 28th September 2017 on security organisation, governance and creating the dynamics for change around cyber security, I was asked a challenging question on which I would like to elaborate:

If the Internet is a free-for-all, and with the Internet of Things we’re putting the entire world on the Internet, what does that make us? Fish in a barrel? J.M. Porpup 

A Security Governance Handbook for the CISO and the CIO

I have been involved with information security matters for almost 20 years and started writing regularly on the topic in 2015.

In 2013, a sophisticated Trojan known as “Shylock” was unleashed on millions of unsuspecting online banking customers. Its modus operandi was to stealthily install itself onto a computer and await banking transactions, upon which it drained the funds out of its victim’s accounts. Not only was this Trojan highly intelligent, but it also had strong self-preservation instincts.