Advice from Bob; The problems with qualitative risk assessments; Defending like an attacker; Secunia's vulnerability review; Watching for data breaches by looking for anomalies; The NSA targets sysadmins, expect criminals to follow suit; Insurers are finding energy firms controls are not up to snuff; 4 lessons CIOs can learn from the Target breach; A court approved a damages settlement for victims of a data breach who did not suffer any damages; Trustwave, Target's QSA, gets sued as a result of the breach.