Comments on: Do your REAL job… http://www.liquidmatrix.org/blog/2007/06/18/do-your-real-job/ Bringing Fire To The Village: Your Source For Computer, Network & Information Security News from Dave Lewis, Security Blogger Fri, 05 Dec 2008 08:40:31 +0000 http://wordpress.org/?v=2.6.5 By: Liquidmatrix Security Digest » Do your REAL job… http://www.liquidmatrix.org/blog/2007/06/18/do-your-real-job/#comment-69050 Liquidmatrix Security Digest » Do your REAL job… Mon, 14 Apr 2008 14:34:12 +0000 http://www.liquidmatrix.org/blog/2007/06/18/do-your-real-job/#comment-69050 [...] next week will bring, but while you’ve got a few moments without interuption, review what I said last time about MITs and figure out what you’re going to get done this week. Take a deep breath and dive [...] [...] next week will bring, but while you’ve got a few moments without interuption, review what I said last time about MITs and figure out what you’re going to get done this week. Take a deep breath and dive [...]

]]> By: myrcurial http://www.liquidmatrix.org/blog/2007/06/18/do-your-real-job/#comment-41137 myrcurial Mon, 18 Jun 2007 14:19:30 +0000 http://www.liquidmatrix.org/blog/2007/06/18/do-your-real-job/#comment-41137 I probably would... except I find that mathematical representation of risk doesn't really fly with the rest of the C-suite - they're much more comfortable with the simplified matrix - Orange Jumpsuit, Lose My House, Rubber Glove Treatment, Look Stupid. I think that I might just have to add a new discussion thread -- how to map "Infosec - by the book" to "Infosec - the Yes People" -- because there is value in attempting to do a good job of applying metrics to risk analysis, but that value is hard to articulate to the people who pay the bills. Thanks for the comment Alex. I probably would… except I find that mathematical representation of risk doesn’t really fly with the rest of the C-suite - they’re much more comfortable with the simplified matrix - Orange Jumpsuit, Lose My House, Rubber Glove Treatment, Look Stupid. I think that I might just have to add a new discussion thread — how to map “Infosec - by the book” to “Infosec - the Yes People” — because there is value in attempting to do a good job of applying metrics to risk analysis, but that value is hard to articulate to the people who pay the bills. Thanks for the comment Alex.

]]> By: Alex http://www.liquidmatrix.org/blog/2007/06/18/do-your-real-job/#comment-41134 Alex Mon, 18 Jun 2007 14:13:30 +0000 http://www.liquidmatrix.org/blog/2007/06/18/do-your-real-job/#comment-41134 Hi! For a good P.E.H. process, wouldn't you also want to report risk (LEFxPLM)? Hi!

For a good P.E.H. process, wouldn’t you also want to report risk (LEFxPLM)?

]]>