If practicing information security can be a tough job, security journalism is aguably tougher. You’re often not an expert, yet to you have to translate between experts and the public, the public and experts, identify a sales pitch and yet still pull out an interesting story that’s worth the bits and bytes it’s written on. [...]
how long should information be kept?
Duplicated, Dangerous, Data and it’s terrible cost for your business
The 60 second guide to the ISO 27000 series of Information Security Standards
Is information security training worth it? A personal experience of CISSP bootcamp
The hidden risks of auditor rotation
From mouse to tiger… or pussy cat?
Burying the password
