IT Auditing

My Oh My, PCI!

| | Compliance, consulting, Governance, Risk Management & Compliance, IT Auditing, PCI DSS
In my work, I’m often engaged with merchants in different verticals, doing PCI assessments. This  frequently involves assisting them with their PCI Self-Assessment Questionnaires (SAQ). It’s an interesting process because the merchants ...
Suspicious Minds
Change is the Only True Constant

Change is the Only True Constant

| | Careers, Incident Response, Information Security, IT Auditing, IT Certifications, Personal Branding, Personal Growth, relationships
Change is good.  Sometimes it can be painful and it may take a while to get some perspective and realize you’ve grown.  It’s all part of the process and I’ve learned to ...
Suspicious Minds

2010 Rearview Mirror

| | Careers, cisa, consulting, Information Security, IT Auditing, IT Certifications, Personal Branding, relationships, Risk Assessments, training, vulnerability assessments
January is a time of reflection and renewal, thinking about the past year and the present one.  We use this time to measure ourselves and set or renew goals, pointing our inner ...
Suspicious Minds

Cleaning the Mental Gutters

| | books, cisa, critical thinking, Information Security, IT Auditing, IT Certifications, OSSTMM
No, I’m not thinking about porn or any other nasty stuff, just reflecting that like during Fall when we clean our house gutters, it’s appropriate to think about how we think and ...
Suspicious Minds

Sum Sum Summertime!

| | books, cisa, Incident Response, Information Security, IT Auditing, Security Metrics, Security Tools, training
The calendar says its Summer although here in the Pacific Northwest, we’re not sure ~ its a cool Summer, which makes it fine for reading security books in the hammock or doing ...
Suspicious Minds