Mario Platt·May 4, 2020Social Practice Theory and Cyber SecurityLet’s start with some housekeeping. If you came here looking for methods or answers you can apply tomorrow, I’m afraid you’ll be…
Mario Platt·Feb 18, 2020Social practices and Timespan of Discretion in Cyber SecurityIf you’ve been following me for long enough, you’ll know I’m a massive fan of Jabe Bloom work, particularly on Sociotechnicity and Design…
Mario Platt·Feb 5, 2020Why your security policies are a business liability and what to do about itI’ve been having quite a few conversations lately along these lines, making a case that many (if not most or all) of the security policies…
Mario Platt·Jan 29, 2020Anthro-Complexity and Cyber SecurityI’ve been meaning to write about Anthro-complexity and Cynefin framework and making a quick introduction to what it is, how it works and…
Mario Platt·Jan 22, 2020InfoSec view of the DSG Retail ICO fineDISCLOSURE: I used to work for Dixons Carphone Group (DCG) around the time of this second breach with a senior security role, however I…A response icon1A response icon1
Mario Platt·Jan 14, 2020Hacking contracts for fun and profitOne of the big challenges for Information Security, particularly in organisations which have major outsourced IT contracts from the global…
Mario Platt·Jan 10, 2020Security process improvement or how I saved an org > £1M/yearThis situation I’m referring to happened about 7 years ago. I tell it not so much because of ‘the thing itself’ but as a tale of the type…
Mario Platt·Jan 7, 2020Threat modelling in a post-C.I.A world — focus on D.I.EA while ago I created the following Wardley map of Threat Modelling. You can find the actual MapScript code for this map (where in the…
Mario Platt·Dec 30, 2019Security for the 2020s: The Skills and Talent problemIf you’ve been following security news and any prominent security speakers for the past year or two, you’ll certainly have come across 2…
