Dan Lohrmann

The more things change, the more things stay the same. This wise proverb has never been more evident than at the 2009 SC Awards U.S. Dinner & Presentation. From the historic election of President Barack Obama to the global economic downturn, our world has witnessed un­precedented change in the past year.

The growth in telework is not as robust as most people think, as managing remote workers and security are big problems. But "secure telework" is possible.

Another year and another set of new resolutions. But can we plan cybersecurity strategically? Some colleagues say no. They insist events are moving too fast.

Back on July 30, the Wall Street Journal published an article entitled, “Ten Things Your IT Department Won’t Tell You.” From getting around web filters to downloading unauthorized software, tips were provided. Thousands of blogs immediately lit up across the country both to support and denounce the article.

Back in May, on our Michigan.gov website, we experienced a cyber sit-in. Parents were encouraged to protest possible Medicaid cuts by teaming-up with a group calling themselves the Electronic Disturbance Theater (ECD).

For security professionals, saying yes, or offering workable alternative solutions, is especially hard. When asked to consider new technologies, we instinctively want to just say no. Isn't saying no our job?

Everyone's talking about their preferred security organization of the future. Whether you're a CSO, CISO, director, manager, security specialist, or whatever, you have an opinion about where the top person in the security group should report. I happen to think this is an essential factor in determining success for information security programs. Getting this right may even be more important than the number of CISSP-certified professionals your company boasts. Contrary to popular opinion, I think we should leave information security under the chief information officer (CIO).