Robert Garigue: Structuring Risks (Role of Security)

Advanced Cyber/IO, ICT-IT, Strategy-Holistic Coherence, Threats
0Shares
Click to Enlarge

Credited by Robert Garigue to Gabe Davids of EDS.

Core Point:  Done properly, security enables MORE risk-taking, allows one to do MORE with LESS.  In other words, cyber-security policies that are risk-averse instead of risk-enabling are, in a word, retarded and retard the enterprise.  Case in point: Wikileaks leading to no more flash drives–what SHOULD be in place is all the flash drives one wishes, but embedded security that prevents or flags abuse of those flashdrives.

See Also:

Robert Garigue, “Technical Preface” to Book Three

Robert Garigue, CISO Briefing

Robert Garigue: When Everything Else is Distributed….

Advanced Cyber/IO, Strategy-Holistic Coherence, Threats
0Shares
Click to Enlarge

Core Point:  It is not possible to have centralized cyber-anything if both the human end-users and all of the (multi-media and multi-lingual) data is distributed.  This is especially true of security, which is historically several steps behind mission area processes to begin with, and any form of top-down “regulation” that tends to appear after the fact rather than “just in time.”

See Also:

Robert Garigue, “Technical Preface” to Book Three

Robert Garigue, CISO Briefing

Gunnar Peterson on Robert Garigue’s Last Briefing

Advanced Cyber/IO
0Shares
Gunnar Peterson
Click to Enlarge

The issue that Dr. Garigue articulated as well as anyone I have seen is that Information Security is not just security or just information. I have [this] slide printed out hanging above my desk for several years.

Most security people struggle with this concept, and try to separate these two concepts, and if they do, they miss two very important issues. First, they miss the opportunity to look at security as a business enabler. Dr. Garigue pointed out that because cars have brakes, we can drive faster. Security as a business enabler should absolutely be the starting point for enterprise information security programs. One excellent example of this is identity federation, which enables an easier integration across companies and technologies and puts stronger identity credentials on the wire in the process. Secondly, if your security model reflects some CYA abstraction of reality instead of reality itself your security model is flawed. I explored this endemic myopia in a series of posts on decentralization and security. JSB and John Hagel taught us that intgeration and friction cannot be separated, attempts to do so lead to confusion and disorder, and this is the heart of the issue Dr. Garigue's work is articulating. If your business and systems are decentralizing with both hands, and your security model is predicated on centralized, iron fisted control, then the only place your security model works is on the whiteboard.

Emphasis added.  Read rest of commentary….

See Also:

Robert Garigue, “Technical Preface” to Book Three

Robert Garigue, CISO Briefing

Christmas Sadness, Christmas Hope

Blog Wisdom, Cultural Intelligence
0Shares
Jon Lebkowsky Bio

So this is Christmas…

Empathy slaps me silly sometimes, and the “joy of Christmas” can be elusive when you see any fraction of the real pain and suffering in the world. In Buddhism, “suffering” is a technical term that has meanings so deep that words don’t suffice, but the fact is that many people are disrupted and disappointed in ways that scale from trivial to tragic. In this solstice celebration with its Christian religious and spiritual resonance, we try to be festive, to celebrate the life of someone who would have been bemused if not horrified by the material orgy produced in his name, now so vital a part of our economic life that we couldn’t lose it, even if we wanted to.

My paternal grandmother died on Christmas Eve when my father was ten years old. He revealed this to me when I was around the same age, and I realized from then on that Christmas had a far different sense for him than it had for me. Each year at Christmas he was reminded of death, loss, sadness.

I’m aware of many trails of sadness through this year’s holiday season, disconnections and deaths, as well as ordinary frailties and broken promises. In fact the whole world seems to be trembling at the moment, and our future is a blur. Celebration, like nirvana, seems almost selfish at the moment; the bodhisattva path makes more sense. I will celebrate this year as ever, and appreciate those close to me, but I will also find time to mourn the many losses and disappointments, and the divisions that have emerged in my life and others.

I do hope you have a Merry Christmas, forget for a moment the difficult realities that confront us and surround us, take the day to focus on love and fellowship. Subvert the darkness.

O you, happy roots,
with whom works of miracles
and not works of crime,
for burning predestined you were planted.

And to you, thoughtful fiery voice,
becoming the whetstone,
subverting the darkness.
Rejoice in that which is on top.

Rejoice in him,
who the many did not see on earth,
although they ardently cried for.
Rejoice in that which is on top.

~ Hildegarde von Bingen, translation by Rupert Chappelle

So this is Christmas
And what have you done
Another year over
And a new one just begun
And so this is Christmas
I hope you have fun
The near and the dear ones
The old and the young

~ John Lennon