Comments on: Security theater and the value of information http://peter.evans-greenwood.com/2010/01/08/security-theater-and-the-value-of-information/ Trying to understand the intersection between business and technology Thu, 01 Dec 2011 14:45:43 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Peter Evans-Greenwood http://peter.evans-greenwood.com/2010/01/08/security-theater-and-the-value-of-information/comment-page-1/#comment-925 Peter Evans-Greenwood Mon, 11 Jan 2010 08:07:47 +0000 http://peter.evans-greenwood.com/2010/01/08/security-theater-and-the-value-of-information/#comment-925 I found Bruce Schneier's post interesting due to his response to this problem of finding a needle in a haystack.<br><br>What he doesn't recommend is taking a piecewise operational approach (which is something like a conventional BI approach), characterising the scenario and then formalising a response, as this doesn't scale, nor does it find new threats (disruptions). His solution is more organisational than operational, reorienting the response around a longitudinal (rather than operational) view of whats happening across the value-chain, and then looking for relationships between unusual data points.<br><br>It's really a question of changing how you view and use the data, which ties back the whole <a href="http://peter.evans-greenwood.com/2009/12/21/innovation-and-the-art-of-random/" rel="nofollow">"art of random"</a> thing; hence my thought on OODA and John Boyd.<br><br>r.<br><br>PEG I found Bruce Schneier's post interesting due to his response to this problem of finding a needle in a haystack.

What he doesn't recommend is taking a piecewise operational approach (which is something like a conventional BI approach), characterising the scenario and then formalising a response, as this doesn't scale, nor does it find new threats (disruptions). His solution is more organisational than operational, reorienting the response around a longitudinal (rather than operational) view of whats happening across the value-chain, and then looking for relationships between unusual data points.

It's really a question of changing how you view and use the data, which ties back the whole “art of random” thing; hence my thought on OODA and John Boyd.

r.

PEG

]]> By: andymulholland http://peter.evans-greenwood.com/2010/01/08/security-theater-and-the-value-of-information/comment-page-1/#comment-924 andymulholland Fri, 08 Jan 2010 17:34:52 +0000 http://peter.evans-greenwood.com/2010/01/08/security-theater-and-the-value-of-information/#comment-924 Peter - it seems that they had information on the bomber but the right people didnt know at the right time to link to the execution process that should have stopped him. That seems to me to link back to some of your earlier blogs about its not having information - in fact we have too much information - its finding ways to reduce the information to levels that allow it to be usable Peter – it seems that they had information on the bomber but the right people didnt know at the right time to link to the execution process that should have stopped him. That seems to me to link back to some of your earlier blogs about its not having information – in fact we have too much information – its finding ways to reduce the information to levels that allow it to be usable

]]>