Happy New Year! Lots has happened in 2020 with relations to information security, but the biggest thing has been the accelerated (often unwillingly) push towards digital transformation.
One reality of a security incident, is that you may not always know who the attacker is.
So what I WAS going to talk about was the FireEye hack last week and threat modeling... but as I sat down to write this my Twitter and Slack was blowing up about the SolarWinds hack.
The other day, I realized that when I migrated email providers, I did not setup a catch-all email address. I got a couple surprises when I did (more later).
So I was thinking about blameless postmortems the other day and how it relates to emotional intelligence. At the end of the day, you want everyone in the room to feel psychological safety.
One thing I am thankful for is having a good community of friends and colleagues in the information security space.