MXL Consulting

Originally Published 2/25/15 As a Cyber Security Professional, what I want out of Security Awareness training is a change in end user behavior. Unfortunately I have seen too many PowerPoints written by Security Professionals who are trying to impart some of their hard earned wisdom to their user community. Ask any parent of a teenager, wisdom has to be earned, it cannot be given. Quite frankly, I don't care if the end users understand Confidentiality, Integrity, Availability

Originally Published - 12/1/15 As I was thinking about a graduation speech I had been invited to give, I became a little thoughtful and realized that I had been aware of information security from a young age - so I'll fill in some history. 1980’s •I Saw the first computers “hacked” in retail stores - This was the time when the first home computers were available in retail stores in the UK. These were systems like the BBC model B, Sinclair Spectrum, Commodore 64. What I saw wa

Originally Published - 12/6/15 In the same way that there are typically 3 points of view on any issue, 'for", "against" and "unsure", in any organization I would suggest that there are 3 perspectives on risk. Those whose job it is to manage or reduce risk. Legal Finance Information Security Those who don't really know any better - what I call the "Unbeknownst Risk Takers" End Users Partners Vendors Finally there are those who are knowingly taking risks, and are compensated to