Robert Garigue: The Evolving Role of the Chief Information Security Officer within the new structures of Information Systems

Advanced Cyber/IO, Historic Contributions
Click to Enlarge

Briefing as Presented

Seminal Technical Preface (2008)

Gunnar Peterson on Robert Garigue’s Last Briefing

Core Slides as Expandable JPEG with Comments:

Robert Garigue: When Everything Else is Distributed….

Robert Garigue: Information Security MANDATE

Robert Garigue: Structuring Risks (Role of Security)

Robert Garigue: Evolution of Cyber-Space

Robert Garigue: Three Information Security Domains–the Physical (Old), the Process (Current), and the Content (Future)

Reference: WikiLeaks Interview in Forbes–Promoting Business Ethics

03 Economy, 07 Other Atrocities, 11 Society, About the Idea, Commerce, Commercial Intelligence, Corporations, Cultural Intelligence, Ethics, Historic Contributions, InfoOps (IO), Journalism/Free-Press/Censorship, Money, Banks & Concentrated Wealth, Officers Call, Power Behind-the-Scenes/Special Interests, Privacy, Reform
Andy Greenberg

Nov. 29 2010

Fascinating article, including leaks in the pipeline (banks), whistleblowers, censorship, his story, trying to stop leaks, spying, untrustful competitors, secrecy, war, field of intelligence, etc.  … “our primary defense isn’t law, but technology…courage is contagious” (p.8) —  JAS

Forbes Cover Story . . . Forbes Transcript

Following is an excerpt from page 5 regarding moving in the direction of ethical business — JAS

Forbes Cover Story

What do you think WikiLeaks mean for business? How do businesses need to adjust to a world where WikiLeaks exists?

WikiLeaks means it’s easier to run a good business and harder to run a bad business, and all CEOs should be encouraged by this. I think about the case in China where milk powder companies started cutting the protein in milk powder with plastics. That happened at a number of separate manufacturers.

Let’s say you want to run a good company. It’s nice to have an ethical workplace. Your employees are much less likely to screw you over if they’re not screwing other people over.

Then one company starts cutting their milk powder with melamine, and becomes more profitable. You can follow suit, or slowly go bankrupt and the one that’s cutting its milk powder will take you over. That’s the worst of all possible outcomes.

The other possibility is that the first one to cut its milk powder is exposed. Then you don’t have to cut your milk powder. There’s a threat of regulation that produces self-regulation.

It just means that it’s easier for honest CEOs to run an honest business, if the dishonest businesses are more effected negatively by leaks than honest businesses. That’s the whole idea. In the struggle between open and honest companies and dishonest and closed companies, we’re creating a tremendous reputational tax on the unethical companies.

No one wants to have their own things leaked. It pains us when we have internal leaks. But across any given industry, it is both good for the whole industry to have those leaks and it’s especially good for the good players.

But aside from the market as a whole, how should companies change their behavior understanding that leaks will increase?

Do things to encourage leaks from dishonest competitors. Be as open and honest as possible. Treat your employees well.

I think it’s extremely positive. You end up with a situation where honest companies producing quality products are more competitive than dishonest companies producing bad products. And companies that treat their employees well do better than those that treat them badly.

Would you call yourself a free market proponent?

Absolutely. I have mixed attitudes towards capitalism, but I love markets. Having lived and worked in many countries, I can see the tremendous vibrancy in, say, the Malaysian telecom sector compared to U.S. sector. In the U.S. everything is vertically integrated and sewn up, so you don’t have a free market. In Malaysia, you have a broad spectrum of players, and you can see the benefits for all as a result.

How do your leaks fit into that?

To put it simply, in order for there to be a market, there has to be information. A perfect market requires perfect information.

There’s the famous lemon example in the used car market. It’s hard for buyers to tell lemons from good cars, and sellers can’t get a good price, even when they have a good car.

By making it easier to see where the problems are inside of companies, we identify the lemons. That means there’s a better market for good companies. For a market to be free, people have to know who they’re dealing with.

The InterviewYou’ve developed a reputation as anti-establishment and anti-institution.

Not at all. Creating a well-run establishment is a difficult thing to do, and I’ve been in countries where institutions are in a state of collapse, so I understand the difficulty of running a company. Institutions don’t come from nowhere.

It’s not correct to put me in any one philosophical or economic camp, because I’ve learned from many. But one is American libertarianism, market libertarianism. So as far as markets are concerned I’m a libertarian, but I have enough expertise in politics and history to understand that a free market ends up as monopoly unless you force them to be free.

WikiLeaks is designed to make capitalism more free and ethical.

But in the meantime, there could be a lot of pain from these scandals, obviously.

Pain for the guilty.

Do you derive pleasure from these scandals that you expose and the companies you shame?

It’s tremendously satisfying work to see reforms being engaged in and stimulating those reforms. To see opportunists and abusers brought to account.

———————————

Thanks to: Dan Drasin via John Steiner.

Reference (2): United Nations Intelligence in Haiti

05 Civil War, 07 Other Atrocities, 08 Wild Cards, 10 Security, 10 Transnational Crime, 11 Society, Analysis, Augmented Reality, Ethics, Government, Historic Contributions, InfoOps (IO), Intelligence (government), IO Multinational, IO Sense-Making, Law Enforcement, Methods & Process, Military, Officers Call, Peace Intelligence, Real Time
Peace Operations: Seeing

MajGen Eduardo ALDUNATE Herman, Chilean Army (Ret), served as the Deputy Force Commander of the United Nations Force in Haiti (MINUSTAH) in the earliest rounds, and was instrumental in both sponsoring the Joint Military Intelligence Analysis Center (JMAC) concept in its first modern field implementation, but also in evaluating most critically both the lack of useful intelligence from allies relying on secret sources and methods that did not “penetrate” to achieve gangs and neighborhoods; and the astonishing “one size fits all” propensity of the allies to treat every “threat” as one that could be addressed by force.

His contributions are helpful in understanding the more recent failure of allied relief operations in Haiti that again assumed that the use of armed bodies would address the problem, without making provision for real-world ground truth intelligence (CAB 21 Peace Jumpers Plus) or intelligence-driven harmonization of non-governmental assistance (Reverse TIPFID).

See Also:

Reference: Walter Dorn on UN Intelligence in Haiti

Reference: Civil Military Operations Center (CMOC)

2003 PEACEKEEPING INTELLIGENCE: Emerging Concepts for the Future

Books: Intelligence for Peace (PKI Book Two) Finalizing

Reference: Intelligence-Led Peacekeeping

Review: International Peace Observations

Search: UN intelligence peace intelligence

Reference: Bruce Schneier on Cyber War & Cyber Crime

Historic Contributions, IO Sense-Making, Movies
Berto Jongman Recommends...

YouTube 26 Minutes

In this address, Bruce examined the future of cyber war and cyber security.  Mr. Schneier explored the current debate on the threat of cyber war, asking whether or not the threat had been over-stated. He then explored the range of attacks that have taken place, including the Latvian DOS attack and the Stuxnet worm. The address concluded with an exploration of the future of international treaties on cyber war.

Phi Beta Iota: This is utterly brilliant stuff, a historical contribution.  A power struggle between military and police over cyber-security, in US military won–this has consequences.  The weak aspect is the proponency for treaties among states–states are but one of the eight tribes, any “treaty” environment that does not adapt to the reality of eight tribes and hybrid networks is not serious.

See Also:

2010: OPINION–America’s Cyber Scam

1994 Sounding the Alarm on Cyber-Security

1993 War and Peace in the Age of Information–Superintendent’s Guest Lecture, Naval Postgraduate School (NPS)

Search: analytic tradecraft

Analysis, Definitions, Ethics, Historic Contributions, IO Sense-Making, Methods & Process
Jack Davis

While the automated search produces the relevant results, Jack Davis is the Sherman Kent of our time and deserves a cleaner quicker result.  Here is the human in the loop distillation of this great man's contributions as they appear on this web site and the two web sites in Sweden where all our stuff is safely preserved.

Who’s Who in Public Intelligence: Jack Davis

Review: Improving CIA Analytic Performance–Four Papers by Jack Davis

2003 Davis (US) Analytic Paradoxes: Can Open Source Intelligence Help?

1997 Davis A Compendium of Analytic Tradecraft Notes

Search: jack davis and his collected memoranda o

See Also:

Search: The Future of OSINT [is M4IS2-Multinational]

Search: osint cycle

Journal: Opinion on the Failure of “The System”

Worth a Look: Book Reviews on Analysis

Review: Assessing the Tradecraft of Intelligence Analysis

Review: Tell Me No Lies: Investigative Journalism That Changed the World

Review: The Landscape of History–How Historians Map the Past (Paperback)

Review: Strategic Intelligence–Windows into a Secret World

2000 PRIMER on Open Sources & Methods

Review: Thinking in Time–The Uses of History for Decision-Makers

1998 Open Source Intelligence: Private Sector Capabiltiies to Support DoD Policy, Acquisition, and Operations

Review: Strategic intelligence for American world policy (Unknown Binding)