[Free Book] Ten Strategies of a World-Class Cybersecurity Operations Center

Communicating in Two Directions

I had an opportunity to read "Mind the Gaps," an article in this month's Proceedings Magazine by ADM Gortney and ADM Harris¹ .

The article focused on the Readiness Kill Chain, basically noting that it's time to break down the barriers that grown up over time that have resulted in gaps in readiness.  I believe this topic is important because it speaks to an essential role of the officer profession, making our processes better to realize more effective warfighting. I also believe it provides an opportunity to focus on communication, both up and down the chain of command.

NIST Cybersecurity Framework Draft - Not Ready For Primetime

When Executive Order 13636, “Improving Critical Infrastructure Cybersecurity¹,” was released earlier this year, it called for the development of a cybersecurity framework.  The purpose, as expected given the myriad of news articles covering critical infrastructure cybersecurity, was to improve the cybersecurity posture of these organizations by giving them a voluntary framework that enables them to identify, assess, and manage cyber risk.  Fortunately, the “Preliminary Cybersecurity Framework²” is still in draft form, with the latest round of development workshops just completed in Dallas, TX, because it seems like the lessons that should have been learned by other similar frameworks have not yet made their way into the current discussion.

Reducing Risks Through Informed Security Control Selection

Risk Management is not about the number of security controls chosen, but about the security controls well chosen.  The Joint Task Force Transformation Initiative describes a risk management process made up of four steps: frame, assess, respond, and monitor.¹  This represents an effective way of making sure that due diligence is used in the risk management, and ultimately control selection process.  

Notes: One Sheet

I have seen a few articles recently that all talk about the art and value of taking notes.  And this is my response to 99u's poll of, "What's your note-taking system?"

In our masses-of-information-at-your-fingertips type of world we live in, I am a big proponent of taking notes.  And one of my favorite ways to take notes is by what I like to call ... One Sheet.

It is very important how we present information to both friends and foes alike.  When we want the information to be read, we must keep it simple, clean, and accessible.