The Public Eye

Governance & Risk Management

30-Day Cybersecurity Sprint: Just a Start

Eric Chabrow • August 4, 2015

The 30-day Cybersecurity Sprint overseen by Federal CIO Tony Scott has crossed the finish line, but in reality, it looks more like a starting gate to a marathon to get the federal government to secure its battered IT.

Events

Rethinking InfoSec in 'Digital Business' Era

Eric Chabrow • June 7, 2015

The Gartner Security and Risk Management Summit tackles digital business, a concept that blurs the physical and digital worlds, and requires organizations to reconsider how they approach IT security and risk management.

Events

Feds' Big Presence at RSA Conference 2015

Eric Chabrow • April 17, 2015

Leaders and top practitioners from numerous federal government agencies will transplant themselves to San Francisco this coming week to share their knowledge on a wide range of topics at RSA Conference 2015.

Black Hat

Incident Response: Beyond the Breach

Eric Chabrow • August 8, 2014

IT security expert Bruce Schneier, now the chief technologist at an incident response provider, sees tools that help enterprises respond to a data breach being used for other unexpected events.

Black Hat

The Sadness of the Wise IT Security Pro

Eric Chabrow • August 7, 2014

The hacker community can be a cynical crowd, or perhaps a realistic one, that tries to make the best of the threats confronting society. CISO Dan Geer, for example, prefers to hire security folks who are, more than anything else, sadder but wiser.

Events

Cybersecurity: Two Years at a Time

Eric Chabrow • June 29, 2014

The world may move at Internet speed, but the IT security and risk management challenges organizations face seem to be tackled at a much slower pace. Hard to believe, right?

Events

The 'Disappearance' of Keith Alexander

Eric Chabrow • June 25, 2014

As Keith Alexander tells it, when he led the National Security Agency, he didn't exist. Alexander discovered that 'fact' after he retired on May 21 as director of the NSA and commander of the Cyber Command and began shopping to buy a new home.

Events

Exploiting Flaws for the National Good

Eric Chabrow • April 29, 2014

The fact that the U.S. federal government would, under some circumstances, exploit software vulnerabilities to attack cyber-adversaries didn't perturb a number of IT security providers attending the 2014 Infosecurity Europe conference in London.

Breach Notification

A Breach Notification Framework?

Eric Chabrow • March 6, 2014

If Congress fails to enact a national breach notification law, the Obama administration could develop a set of voluntary best practices along the lines of its new cybersecurity framework.

Events

Equating Civil Liberties with Privacy

Eric Chabrow • February 27, 2014

An address by FBI Director James Comey at the RSA security conference seems to equate civil liberties and privacy. But when he offers an example of balancing Americans' rights with cybersecurity, he mainly refers to the civil liberties, not privacy.

Events

RSA Guide for Government Security Pros

Eric Chabrow • February 7, 2014

Here's a sampling of the many sessions at RSA 2014 that will provide timely insights for security specialists in the government sector on such topics as vetting foreign technologies and implementing the new cybersecurity framework.

FISMA

Johnson Pledges InfoSec Fixes at DHS

Eric Chabrow • November 14, 2013

Jeh Johnson, at his confirmation hearing to be the next Homeland Security secretary, pledges to fix internal cybersecurity problems at DHS before seeking further authority to have the department help other agencies get their IT security houses in order.

Events

Authenticating the Internet of Things

Eric Chabrow • March 9, 2013

Internet visionary Vint Cerf sees the development of strong authentication for the billions of devices connected to the Internet as the IT security community's next big challenge.

Events

Risk Management: Theory to Practice

Eric Chabrow • February 25, 2013

Our RSA panel features the NIST thought-leader responsible for its information risk publications along with top IT security practitioners who take NIST guidance and make it work. See how they do it.

Governance & Risk Management

Platform Hints of Obama Cybersec Action

Eric Chabrow • September 4, 2012

The Democratic Party platform on cybersecurity suggests that President Obama will take unilateral action to safeguard the nation's critical IT infrastructure because of Congress' inability to enact comprehensive cybersecurity legislation.