Forest Global Training Partners

Cyber Risks · Krebs on Security

Toward a Culture of Security Measurement

Summary: Dan Geer, chief information security philosopher officer at In-Q-Tel, the CIA's not-for-profit venture capital arm, published an essay in the Harvard National Security Journal arguing that if the tariff of security is paid, it will be paid in the coin of privacy. Geer also wrote that demand for security expertise so outstrips supply that the charlatan fraction is rising, and that security is a means and its game play cannot improve without a scorekeeping mechanism.

Bottom line: Geer's warning that without universal strong authentication a cybercriminal with a few hundred stolen credit cards could buy the virtual machines a botnet used to require points at the measurement gap: without a scorekeeping mechanism, security leaders have no scoreboard to show whether the money they spend buys anything.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related