3 min read
Rob Labbé: Dec 5, 2025 1:35:29 AM
Cyber incident response is often viewed as a technical domain, with practitioners skilled in malware reverse engineering, network and host forensics,...
7 min read
Rob Labbé: Nov 10, 2025 9:23:46 PM
I’ve talked about security cost as the key metric to report on your security program when working with executives and the board. What we have not...
1 min read
This month’s focus is on the importance of double-checking the work of security researchers and headlines. We live in a fast-paced news cycle and a...
2 min read
Rob Labbé: Aug 12, 2025 12:00:00 AM
As security practitioners and leaders, we must contribute to the professionalization of our field by searching out data and evidence-based solutions...
2 min read
We live in very polarizing times, particularly in the US. We choose our words carefully, tiptoe around topics that might devolve into argumentation...
3 min read
Rob Labbé: Jun 5, 2025 12:00:00 AM
As I talk through the practical application of the security cost framework with our members, we are consistently running into a common stumbling...
4 min read
Key Points: TLP is a Sharing Protocol. Companies that do not share threat information are at a disadvantage. Overclassification stifles sharing...
3 min read
Rob Labbé: Mar 8, 2025 12:00:00 AM
Phishing is a significant compromise vector for all companies in all industries. At theMining and Metals ISAC annual conference in November, we...
4 min read
Rob Labbé: Jan 14, 2025 12:00:00 AM
After my last post on using Security Cost as a metric and the basis for a core security team/CISO objective, a few Mining and Metals ISAC members...
3 min read
What does a Greek god, a German philosopher, and a Museum Curator have to teach us about Cyber Threat Intelligence?