We know that cybersecurity isn't the best name to describe what is ostensibly, "information security" but it's the name we're stuck with.

Is it just attitude that keeps security teams from working well with the rest of the organization? And if so, can that attitude be changed? What's keeping things so negative. Some thoughts...

At some point in the past few years, the term "information security" took a back seat to "cybersecurity". Does it matter? Why?

Most of the focus around cybersecurity education is on the technical aspects. Is that the right approach?

I am often asked what a good undergraduate program is to take if someone is aiming for a career in cybersecurity. There are plenty of fantastic options but ironically, one I'm not a fan of is an undergraduate focused purely on cybersecurity!

GDPR comes into effect tomorrow and one of it's biggest advantages is how it will force companies to actually manage their data...well at least personally identifiable information.

GDPR is now of the law of the land in the EU. Did everything change overnight?

Apparently the FBI misrepresented the number of devices they can't access due to encryption by up to a factor of 6x. This is most likely due to clerical error and a lack of actual statistics rather than malicious intent.

GDPR comes into effect on Friday, 25-May. What does it mean globally? Um...we're not really sure.

Listening to customers is built into the DNA of a lot of organizations...why aren't security teams doing the same?