Archive - Security Is

Security is a Renewals Problem

How to negotiate with the vendors you already have

Jul 17 •

April 2025

Security is a Negotiation Problem

How to save money on your vendor contracts

Apr 17 •

February 2025

Security is a Pricing Problem

The way we build our teams is causing our exploding vendor costs

Feb 6 •

December 2024

Security is a False Positive Problem

To stop drowning in your security issues, go upstream

Dec 11, 2024 •

November 2024

Security is a Vendor Assessment Problem

Why Vendor Assessments Usually Suck and How We Can Do Them Better

Nov 22, 2024 •

August 2024

Security Is Not a VPN Problem

Go ahead and use your hotel WiFi

Aug 1, 2024 •

July 2024

Security Is Not An Encryption Problem

Not in the cloud, anyway

Jul 17, 2024 •

June 2024

Making Sense of the Verizon Data Breach Investigation Report

The Verizon Data Breach Investigation Report (DBIR) is an annual report analyzing thousands of security incidents and breaches.

Jun 19, 2024 •

May 2024

Security Is A Useless Controls Problem

We're all a bunch of chimps in a cage

May 29, 2024 •

Security is Not an SBOM Problem

In this article, I cover:

May 15, 2024 •

Security is Not an AI Problem

In this post I cover:

May 2, 2024 •

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts