![\"Brook,](\"http:\/\/www.brookschoenfield.com\/blog-port.JPG\" "\\"Brook,")
lowing? Perhaps this summit is a the beginning of a sea change?<\/p>\nSitting on a plane from Washington DC, USA, to my home in Oakland, California, I\u2019m thinking about the SANS Application Security Summit that I just attended. What are the implications of this gathering, at this time? This seems like a propitious time to open a personal blog on information security. Some new winds may be blowing? Perhaps this summit is a the beginning of a sea change?<\/p>\n
I\u2019ve repeatedly thought that I\u2019d like to share thoughts on the development of my industry. It\u2019s exciting to me, certainly frustrating, sometimes even frightening.<\/p>\n
Perhaps like many of you readers who work in Information Security, I spend my days\u00a0 helping folks manage their digital risks? And probably, like you, I\u2019m not always successful? Perhaps IT can’t field the technology required? Or, providing security requirements is seen by as an undue burden that cannot be borne at this time?<\/p>\n
Still, when I understand that the stake holders feel that due diligence has been served, that an appropriate risk posture has been taken, it\u2019s a good day. Small victories, even though our technologies are often immature or mis-applied, our processes insufficient, and our art, developing. And, of course, very occasionally, I help to identify and eventually close a major gap. Job satisfaction, absolutely.<\/p>\n
Does any of this ring any bells or resonate for you?<\/p>\n
Occasionally, a flash of incite will come to me. And clear as mud, I suddenly sense a possibility for us to perhaps advance our art just a wee bit. I\u2019ll share those here for your consideration and comment. While I do occasionally publish papers and speak at conferences (as I did these last 2 days), I intend to use this forum for my tentative possibilities, not for my certainties, which are generally few, anyway.<\/p>\n
Months will go by in the daily round of meetings, risk assessments, security requirements, system architectures, and design comments. During these periods, I may choose to be quiet, waiting for some inspiration to strike. Please stay tuned.<\/p>\n
Perhaps you\u2019ll appreciate knowing that I\u2019m working through the same issues as you? Or, maybe you\u2019ll comment that I\u2019m way off course? I don\u2019t know. I welcome the interchange, in any event. Through dialog, I learn as much, probably more, than I give.<\/p>\n
I\u2019ll write more about the SANS Summit in a subsequent entry. But, here\u2019s a beginning…<\/p>\n
cheers,<\/p>\n
\/brook<\/p>\n","protected":false},"excerpt":{"rendered":"
Sitting on a plane from Washington DC, USA, to my home in Oakland, California, I\u2019m thinking about the SANS Application Security Summit that I just attended. What are the implications of this gathering, at this time? This seems like a … Continue reading