KIM L. JONES

Most of my CISO assignments have been transformative roles. I've usually been called in when the company is in crisis or to replace a CI...

A few years ago a good friend of mine and longtime CISO left the chair to become the chief security strategist at a well-known security t...

Several weeks ago I sat down with my good friend Jill to discuss security and the security profession. Jill doesn't come from our world ...

In the wake of the Equifax breach, I have found myself on an increasing number of calls with reporters and business leaders from various ...

I am not going to talk about the Equifax breach. I know nothing more about the breach than what has been reported via numerous media outl...

Recently I and several other cybersecurity professionals were asked, "What does it take to become a cybersecurity superhero?"  Interestin...

I usually don't use this blog to comment on security "current events;" there are enough pundits and prognosticators out there already tha...

My son Scott turns 23 today. As I watch him making his way into the world I am endlessly proud of the truly kind, generous, and scary-sma...

In my new role, I regularly speak with business leaders and senior cyber professionals about the next generation of cyber warriors and wh...

Pop quiz today! Which of the following situations is a violation of privacy: A national retailer utilizes purchases you make with them to...

As we look back on 2016, we are once again faced with a plethora of data breaches which resulted in the exposure of hundreds of millions ...

I’ve had the privilege through most of my career to have known some very smart and thought-leading people. These people regularly push me...

Security professionals have preached for some time about the importance of understanding the business when constructing a security progra...

"Explain it to me like I'm a 6 year old." I first heard this line spoken by Denzel Washington in the 1993 movie Philadelphia . Since the...

Back in my GI days I participated in an intelligence exercise designed to simulate how we would go about defining and gathering informati...

Over the past few weeks there has been a bit of a dust-up regarding the reliability of analysis and information originating from our nati...

Jim Routh is one of our industry's visionary leaders. I always enjoy listening to him and his vision of the direction of our profession....

Over the past three weeks I’ve had occasion to attend three separate events all focusing on cybersecurity and the Board of Directors (BoD...

Recently, I've come across a spate of articles discussing the need for security professionals to "speak the language of the business." T...

For the past 6 weeks I have been listening to the rumbles and fallout of the RSA conference… …no, that’s not quite correct. It’s not been...