Observations, thoughts, comments, new and ramblings about information security ranging from anti-virus to incident handling, policies, patch management, secure coding, security engineering, and more.
CISSP, GCIH. Entered the information security industry in 1995. Built IT Security programs from scratch. Current working to engineer security into systems as part of the systems development life cycle. Experience: infosec policies, procedures; security technology deployment; security awareness; investigations & incident response; anti-virus, anti-spam, firewalls, IDS, etc.
