Why availability and integrity are more important than confidentiality for OT - disabling safety systems and manipulate process control can lead to physical accidents.
There are many security controls to choose from, but they are not all created equal. We, as security experts, are not good at estimating or explaining what the security benefit of investing in a new control would be in business terms.
Does the AI act make it illegal to use AI for European companies?
The AI Act does not make it illegal to use AI, but it does regulate a lot of the use cases. As EU acts typically go, it makes it mandatory to do a lot of assessment, documentation and governance &#…
Reading the AI Act. It has provisions to foster innovation and support startups and SME's, but reading the legalese brings feelings of trying to speedrun upstream a river of high density mud. The support is in form of conformity templates, awareness training and being prioritized for joining a regulatory sandbox.
I have a blog I have been publishing to a bit on and off since 2015. Today I looked at the statistics for the last 12 months. 15% of the posts got 80% of the views, and some of the more popular posts are quite old - from 2015, 2019, and from 2022. Take a look at https://safecontrols.blog if you are interested :)
Engaging the Whole Workforce in Cybersecurity: A Guide for Security Managers
Cybersecurity requires everyone to contribute but that is hard to achieve. In this post we look at how security managers can think like marketers to engage the management team, create strategic ali…