I am absolutely sick to death of security vendors using the buzz-phrase Artificial Intelligence (AI) as a descriptor for their product or service.

Because:

  1. AI does not even exist yet, the most you can say is that it’s very clever programming;
    o
  2. Not everyone is a fan of AI.

So, by trying to claim your product uses AI, you have now alienated 2 types of people; 1) those who hate bullsh*t artists, and 2) the paranoid.

In cybersecurity, there are a lot of both.

Continue reading “Artificial Intelligence (AI)? You’ve Just Lost Two Buyers” →

It is with thanks to Chad Loder that I write this blog. His post on LinkedIn made me laugh out loud and is what inspired me to propose the CEO Cybersecurity Challenge (#ceocybersecuritychallenge). The very simple post was:

From: Security Team
To: All Employees
Subject: Security Awareness Training

To opt out of this year’s security training, click here.

Security experts will instantly see the simple genius of this social engineering tactic. In just 10 words you get:

Continue reading “The CEO Cybersecurity Challenge” →

Anyone who reads my blogs knows that I’m not highly technical. In fact, I have warned organisations against buying technology [for technology’s sake] more than I have ever recommended it. And I will continue to do so until everyone is following the pre-purchase golden rules:

Continue reading “Which Data Discovery Solution is Right for Your Business” →

This Saturday marks one year to the day that GDPR was enforced. 3 things are clear:

  1. The self-serving scaremongers were, as I suspected, full of $*%&;
  2. Anyone wondering why there have not been more fines continues to be ignorant of the true intent of GDPR; and
  3. Interest in GDPR took a nosedive after May 25, 2018
Continue reading “GDPR: Some Thoughts on Year 1” →