There are four strategies to manage risk and given the increasing levels of information security risks, all four have become relevant. Risk can be accepted, mitigated, avoided or transferred. A naive thought can be that insurance is a way of risk transfer and in a way this is true. But…

Currently security professionals are struggling with at least three problems. They are facing a big shortage of qualified people to fill the growing number of vacancies in their workforce. They are facing the need to secure a growing attack surface, mostly due to a longer supply chain. …

In our ever faster changing world, CISO’s need to know whether their security programs are keeping up with the evolving threat landscape. Here are 5 baselines that any CISO should use to measure the effectiveness of their security strategy. The BOOM framework This blog is nothing more than a shameless plug for the…

The rise of quantum technology is a blessing for information security as it will force us to replace current security controls with inherently secure ones, but only if we embrace this technology now. Security by complexity Information security is concerned with protecting confidentiality, integrity and availability of data. In the current age of…

If we have learned anything during the last 2 years, during the pandemic, it is that life is uncertain. The world around us is only predictable, or even understandable, to a certain limit. Beyond that, events are in many cases uncertain. And we have all seen how difficult it is…

In the previous century, Internet started out as an open network, enabling scientists to exchange information. Internet nowadays is a zone of conflict and disinformation, where actors attack each other without attribution and social media is being used to influence democracies and public opinion. And now even the very fabric…