J Wolfgang Goerlich's thoughts on Information Security
Video of my GrrCon Threat Modeling Talk

By wolfgang. 7 November 2013 18:38

GrrCon posted video of my 2013 talk. My talk is kicking off a collaboration with #misec to create a threat modeling methodology. We held our first working session on 10/26. The next steps include talks at BSides Jackson (Mark Kikta), at next week's #misec meeting (Steven Fox and me), and next month's ISSA meeting (Mark and me). A formal threat modeling workshop will be held in Q1 2014. Stay tuned for more.

 

GrrCON 2013- Beautiful Models - J Wolfgang Goerlich
http://www.youtube.com/watch?v=82_lYv5CDy8

We need beautiful models. Models attract and hold your attention. They excite you. They prompt action. And action, excitement, and focus is exactly what is needed to defend IT. By models, of course, we mean threat models. Intricate and beautiful, a good threat model tells a story. It indicates what we are protecting and where the attacks may come from. Done right, modelling highlights both the strengths and weaknesses of our IT. It becomes a means for strengthening and focusing our efforts. We need beautiful models to see what is and what could be.

This session will explore threat modeling as part of the secure development lifecycle. A case study will be presented. The stories are real and only the names have been changed to protect the innocent. Beautiful Models answers the question: what is it that makes a threat model beautiful and actionable?

Tags:

Threat modeling

Friday Books and Talks 11/01/2013

By wolfgang. 1 November 2013 17:06

Here are some of the books and talks that I enjoyed this week, in no particular order.

Finding the Next Steve Jobs: How to Find, Hire, Keep and Nurture Creative Talent
by Nolan Bushnell, Gene Stone

In Silicon Valley legend Nolan Bushnell's first book, he explains how to find and hire employees who have the potential to be the next Steve Jobs. Here Bushnell explains how to find, hire, and nurture the people who could turn your company into the next Atari or the next Apple. Bushnell's advice is constantly counter-intuitive, surprising, and atypical. When looking for employees, ignore credentials. Hire the obnoxious (in limited numbers). Demand a list of favorite books. Ask unanswerable questions. Comb through tweets.

Just because you've hired creatives doesn't mean you'll keep them. Once you have them, isolate them. Celebrate their failures. Encourage ADHD. Ply them with toys. Encourage them to make decisions by throwing dice. Invent haphazard holidays. Let them sleep.

The business world is changing faster than ever, and every day your company faces new complications and difficulties. The only way to resolve these issues is to have a staff of wildly creative people who live as much in the future as the present, who thrive on being different, and whose ideas will guarantee that your company will prosper when other companies fail.

Tribal Leadership: Leveraging Natural Groups to Build a Thriving Organization
by Dave Logan, John King

Within each corporation are anywhere from a few to hundreds of separate tribes. In Tribal Leadership, Dave Logan, John King, and Halee Fischer-Wright demonstrate how these tribes develop—and show you how to assess them and lead them to maximize productivity and growth. A business management book like no other, Tribal Leadership is an essential tool to help managers and business leaders take better control of their organizations by utilizing the unique characteristics of the tribes that exist within.


In today's constantly shifting marketplace, "innovation" has become the catchword of companies large and small. In The Innovation Premium, Ron Jonash and Tom Sommerlatte draw on years of research and experience to demonstrate-for the first time-that those companies that consistently achieve innovation leadership enjoy measurable advantages, including an average 15 percent increase in shareholder returns. Bridging the gap between the technological and organizational aspects of innovation, the authors show managers at all levels how to move beyond continuous improvement of products and processes to create the "Next Generation Enterprise," an organization that thrives on innovation and knows how to harness it to create and capture value, spark and speed growth, and achieve the highest standards of performance.


By Onora O'Neill

Trust is on the decline, and we need to rebuild it. That’s a commonly heard suggestion for making a better world … but, says philosopher Onora O’Neill, we don’t really understand what we're suggesting. She flips the question, showing us that our three most common ideas about trust are actually misdirected

By Itay Talgam

An orchestra conductor faces the ultimate leadership challenge: creating perfect harmony without saying a word. In this charming talk, Itay Talgam demonstrates the unique styles of six great 20th-century conductors, illustrating crucial lessons for all leaders.

Tags:

General

Friday Books and Talks 10-25-2013

By wolfgang. 25 October 2013 07:46

Here are some of the books and talks that I enjoyed this week, in no particular order.

Strategic Renaissance: New Thinking and Innovative Tools to Create Great Corporate Strategies
by Evan M. Dudik 

"In this insightful primer on corporate strategy development, Dudik shows why the traditional strategic goal of sustainable competitive advantage is being replaced with a new goal: opportunity creation and exploitation. Dudik also explores the business application of a classic military strategy: the hammer and the pivot."

Engaged! Outbehave Your Competition to Create Customers for Life
by Gregg Lederman

"Customers love it when employees are ENGAGED to deliver an experience. However, it doesn’t come easy for most companies. The level to which your workforce is ENGAGED also has a significant impact every day on employees’ happiness and productivity, the customer experience, and your company’s profitability. Your company can be one that customers love to do business with ... one that turns customers into loyal followers who buy more and more often. The journey through ENGAGED!, will teach you what leading companies do to create customer love."

 

TED: Psychedelic science
By Fabian Oefner

"Swiss artist and photographer Fabian Oefner is on a mission to make eye-catching art from everyday science. In this charming talk, he shows off some recent psychedelic images, including photographs of crystals as they interact with soundwaves. And, in a live demo, he shows what really happens when you mix paint with magnetic liquid--or when you set fire to whiskey." 

I enjoy the transfer of one sense to another, from sound to motion, motion to light, light to visuals, and so on. Oefner is a great example of capturing scientific moments and creating artwork from these moments.

Tags:

General

Friday Books and Talks 10-18

By wolfgang. 18 October 2013 13:48

Ideas Are Free: How the Idea Revolution Is Liberating People and Transforming Organizations
by Alan G Robinson, Dean M Schroeder

"Because they're doing the day-to-day work, front-line employees see many problems and opportunities their managers don't. But most organizations fail to realize this potentially extraordinary source of revenue-enhancing ideas. The authors of "Ideas Are Free use real-world examples from their work with hundreds of organizations to show how to exploit the virtually free, perpetually renewable resource of employee ideas. The book explains how sustainable competitive advantages in areas ranging from productivity and responsiveness to cost reduction and quality assurance are only possible with the attention to detail that comes from getting and implementing large numbers of ideas from employees. Subjects include how to make ideas part of everyone's job, how to set up and run an effective process for handling ideas, how to help people come up with more and better ideas, and how a strong flow of ideas can have a profound impact on an organization's culture."

The Ten faces of Innovation
by Tom Kelley, Jonathan Littman

"The role of the devil's advocate is nearly universal in business today. It allows individuals to step outside themselves and raise questions and concerns that effectively kill new projects and ideas, while claiming no personal responsibility. Nothing is more potent in stifling innovation. Drawing on nearly 20 years of experience managing IDEO, Kelley identifies ten roles people can play in an organization to foster innovation and new ideas while offering an effective counter to naysayers. Among these approaches are the Anthropologist—the person who goes into the field to see how customers use and respond to products, to come up with new innovations; the Cross-pollinator who mixes and matches ideas, people, and technology to create new ideas that can drive growth; and the Hurdler, who instantly looks for ways to overcome the limits and challenges to any situation."


Alessandro Acquisti

"The line between public and private has blurred in the past decade, both online and in real life, and Alessandro Acquisti is here to explain what this means and why it matters. In this thought-provoking, slightly chilling talk, he shares details of recent and ongoing research -- including a project that shows how easy it is to match a photograph of a stranger with their sensitive personal information."

Application to social engineering. The presenter creates facial composites using photographs of a target's friends. The resulting composite photograph is registered, by the target, as being more trustworthy.

Tags:

General

Friday Books and Talks 10-11

By wolfgang. 11 October 2013 13:17

Here are some of the books and talks that I enjoyed this week, in no particular order.

Change by Design: How Design Thinking Transforms Organizations and Inspires Innovation
by Tim Brown

"The myth of innovation is that brilliant ideas leap fully formed from the minds of geniuses. The reality is that most innovations come from a process of rigorous examination through which great ideas are identified and developed before being realized as new offerings and capabilities. This book introduces the idea of design thinking‚ the collaborative process by which the designer′s sensibilities and methods are employed to match people′s needs not only with what is technically feasible and a viable business strategy. In short‚ design thinking converts need into demand. It′s a human−centered approach to problem solving that helps people and organizations become more innovative and more creative."

Tipping Sacred Cows: Kick the Bad Work Habits that Masquerade as Virtues
by Jake Breeden

"You should try your best, work well with others, and produce excellent work. Right? But these cherished nuggets of advice, in practice, have a dark side that can lead to career-limiting unintended consequences. And they're not alone. Based on Jake Breeden's experience coaching thousands of leaders in 27 countries, and new research in economics, neuroscience, and psychology, Tipping Sacred Cows reveals how to overcome the dangerous behaviors that masquerade as virtues at work, and how to lead with fewer self-imposed limitations and greater results. It's a guide for curious, courageous people at work."

 

The First 20 Hours - How to Learn Anything
By Josh Kaufman

"Josh Kaufman is the author of the #1 international bestseller, 'The Personal MBA: Master the Art of Business', as well as the upcoming book 'The First 20 Hours: Mastering the Toughest Part of Learning Anything.' Josh specializes in teaching people from all walks of life how to master practical knowledge and skills. In his talk, he shares how having his first child inspired him to approach learning in a whole new way."

The game that can give you 10 extra years of life
By Jane McGonigal

"After suffering a severe concussion, Jane McGonigal expereinced physical debilitaion and suicidal tendencie. She searched the medical research for an answer to her problem. She discovered how to extend your life."

Tags:

General

Friday Books and Talks 10-04

By wolfgang. 4 October 2013 15:03

Here are some of the books and talks that I enjoyed this week, in no particular order.

Exploiting Chaos
By Jeremy Gutsche

"Did you know that Hewlett Packard, Disney, Hyatt, MTV, CNN, Microsoft, Burger King, and GE all started during periods of economic recession? Periods of uncertainty fuel tremendous opportunity, but the deck gets reshuffled and the rules of the game get changed. Exploiting Chaos is the ultimate business survival guide for all those looking to change the world. Topics include: sparking a revolution, trend: hunting, adaptive innovation and infectious messaging."

The Ten Faces of Innovation: IDEO's Strategies for Defeating the Devil's Advocate and Driving Creativity Throughout Your Organization
by Tom Kelley, Jonathan Littman

"The author of the bestselling The Art of Innovation reveals the strategies IDEO, the world-famous design firm, uses to foster innovative thinking throughout an organization and overcome the naysayers who stifle creativity. The role of the devil's advocate is nearly universal in business today. It allows individuals to step outside themselves and raise questions and concerns that effectively kill new projects and ideas, while claiming no personal responsibility. Nothing is more potent in stifling innovation."


By Malcolm Gladwell

"It's a classic underdog tale: David, a young shepherd armed only with a sling, beats Goliath, the mighty warrior. The story has transcended its biblical origins to become a common shorthand for unlikely victory. But, asks Malcolm Gladwell, is that really what the David and Goliath story is about?"

By James Flynn

"It's called the "Flynn effect" -- the fact that each generation scores higher on an IQ test than the generation before it. Are we actually getting smarter, or just thinking differently? In this fast-paced spin through the cognitive history of the 20th century, moral philosopher James Flynn suggests that changes in the way we think have had surprising (and not always positive) consequences. James Flynn challenges our fundamental assumptions about intelligence."

Tags:

General

Friday Books and Talks 09-27

By wolfgang. 27 September 2013 18:15

Outside Innovation: How Your Customers Will Co-Design Your Company's Future
by Patricia B. Seybold

How dynamic businesses of every size can unleash innovation by inviting customers to co–design what they do and make.

The refrain is familiar for Patricia Seybold in her journeys as a top technology and management strategist: "I want our company to be acknowledged as the most admired and most customer–valued in our industry and to be recognized as the company that has forever changed the way things are done." "How can we become the Google of banking?" "How can we be the eBay of software?" "I want to be the JetBlue of manufacturing."

"How can we become the undisputed trend–setter in our industry–with a competitive bar no one can topple?"

In Outside Innovation, bestselling author Seybold taps her close relationship with dozens of high–innovation companies to reveal the untold strategy behind the trendsetters and the next HUGE leap forward in customer strategy. Seybold shows that companies that are dominating their category and staying ahead of the pack are collaborating at every level of their business with their customers.

 

TED: The fiction of memory
By Elizabeth Loftus

"Psychologist Elizabeth Loftus studies memories. More precisely, she studies false memories, when people either remember things that didn't happen or remember them differently from the way they really were. It's more common than you might think, and Loftus shares some startling stories and statistics, and raises some important ethical questions we should all remember to consider. Memory-manipulation expert Elizabeth Loftus explains how our memories might not be what they seem -- and how implanted memories can have real-life repercussions."

Tags:

General

Friday Books and Talks 09-20

By wolfgang. 20 September 2013 11:44

Relationship Economics: Transform Your Most Valuable Business Contacts Into Personal and Professional Success
by David Nour, Alan Weiss

"Relationship Economics isn't about taking advantage of friends or coworkers to get ahead. It's about prioritizing and maximizing a unique return on strategic relationships to fuel unprecedented growth. Based on the author's global speaking and consulting engagements, Relationship Economics reveals that success comes from investing in people for extraordinary returns. This revised and updated version explains the three major types of relationships—personal, functional, and strategic—and how to focus each to fuel enterprise growth. It introduces new concepts in relationship management, including the exchange of Relationship Currency, the accumulation of Reputation Capital, and the building of Professional Net Worth. These are the fundamental measures of business relationship, and once you understand them, you'll be able to turn your contacts into better executions, performance, and results."

 

TED: The pursuit of ignorance
By Stuart Firestein

"What does real scientific work look like? As neuroscientist Stuart Firestein jokes: It looks a lot less like the scientific method and a lot more like "farting around … in the dark." In this witty talk, Firestein gets to the heart of science as it is really practiced and suggests that we should value what we don’t know -- or “high-quality ignorance” -- just as much as what we know. Stuart Firestein teaches students and “citizen scientists” that ignorance is far more important to discovery than knowledge."

Tags:

General

Keys to a high-performing IT department

By wolfgang. 18 September 2013 14:51

mrc's Cup of Joe Blog included my minimum viable mantra in their recent blog post:

6 keys to a high-performing IT department
http://www.mrc-productivity.com/blog/2013/09/6-keys-to-a-high-performing-it-department/

“Approach everything with a startup mentality,” says J Wolfgang Goerlich, VP of Consulting Services for VioPoint. “By that, I mean, seek to answer the following two questions: what drives value and what keeps the light on. I suggest adopting a minimum viable strategy for keeping the lights on. By satisfying the requirements without spending too much time, you make space to deliver value. Spend most of your time and effort on what really matters, what really drives value, what really makes a difference. In doing so, you can deliver outstanding results to your manager, your stakeholders, and your organization.”

Click thru and read the article, including the comment from Michael Stephenson. Lots of good advice for optimizing your team and department.

Tags:

Team management

Friday Books and Talks 09-06-2013

By wolfgang. 6 September 2013 16:40

Here are some of the books and talks that I enjoyed this week, in no particular order.

The One Thing: The Surprisingly Simple Truth Behind Extraordinary Results
by Gary Keller, Jay Papasan

You want less. You want fewer distractions and less on your plate. The daily barrage of e-mails, texts, tweets, messages, and meetings distract you and stress you out. The simultaneous demands of work and family are taking a toll. And what’s the cost? Second-rate work, missed deadlines, smaller paychecks, fewer promotions — and lots of stress.

And you want more. You want more productivity from your work. More income for a better lifestyle. You want more satisfaction from life, and more time for yourself, your family, and your friends.

Authors Gary Keller and Jay Papasan demonstrate that the results you get are directly influenced by the way you work and the choices you make. You'll learn how to identify the lies that block your success and the thieves that steal time from your day. By focusing on your ONE Thing, you can accomplish more by doing less. What's your ONE Thing?

Unusually Excellent: The Necessary Nine Skills Required for the Practice of Great Leadership
by John Hamm

Master the fundamentals of leadership-at every stage in your career. Often, when leaders experience trouble, they look to blame an outside source or expect a small tweak to right their ship. But many times they've actually lost their grip on the very basic foundation of leadership. The business environment may change, but no management trend can displace the core laws, proven over centuries, of excellent leadership. Unusually Excellent is an essential resource for leaders that brings these fundamentals together in a new and comprehensive way. This book will help leaders at any level keep their focus on the bedrock principles that will make them extraordinary.

 

TED: Listen, learn ... then lead
By General Stanley McChrystal

"Four-star general Stanley McChrystal shares what he learned about leadership over his decades in the military. How can you build a sense of shared purpose among people of many ages and skill sets? By listening and learning -- and addressing the possibility of failure."

TED: Learning from leadership's missing manual
By Fields Wicker-Miurin

"Leadership doesn't have a user's manual, but Fields Wicker-Miurin says stories of remarkable, local leaders are the next best thing. At a TED salon in London, she shares three. Fields Wicker-Miurin wants to improve the quality and impact of leadership worldwide by discovering leaders in unique, local settings and connecting them with one another."

Tags:

General

    Log in