Perimeter
When you move the contents to the cloud, it is above the perimeter. Even if you are pretty sure you
Administrative Control
Certain cybersecurity practitioners insist to impose technical controls to secure the infrastructure/system. To some degrees yes, basic technical controls will
Dual Standards
It is no harm to have dual standard to fit specific use case. As long as the directive is clearly
Competency
Recently I gave a talk to a local university students about cyber survivability. At the end of the session, it's
Seasonal Factor
There are network anomaly detection technologies to alert abnormal network traffic of potential cyberattack. The pre-requisite is let the technology
Enforcement #4
Cybersecurity policy establishment and cybersecurity policy enforcement are usually executed independently in an organization. Normally, policy authors are more knowledgeable
Opportunist
Policy statement must be clearly defined and published. It must also be precise without ambiguity but subject to interpretation by
Spare Capacity
Availability is one of the protection objectives in cybersecurity. When deploying new systems, the design must cater for spare capacity.
Surrealism
It is easy to for artists to draw something or writers compose fictions beyond imagination. Such creation even stimulates innovation
Purpose of control
When we deploy control, we always have to understand what we are trying to achieve. In the illustration, if the
Dead End
Good cybersecurity policies (management directives) should avoid incorrect interpretation nor perception. Further down the road, if policies is not precise
Different perspectives
It is the same scene but different people will interpret it differently. Business managers or plant floor engineers have their