Re: [SC-L] OWASP Publicity

2007-11-19 Thread Benjamin Tomhave
> a > question of policy with a question of choice of technology selection. > > A few days early, but Happy Thanksgiving, to all! > > - James > > James W. Stibbards > Sr. Director - Sales Engineering > Cloakware, Inc. > email: [EMAIL PROTECTED] > phone: 703-752-4836 >

Re: [SC-L] OWASP Publicity

2007-11-19 Thread James Stibbards
es James W. Stibbards Sr. Director - Sales Engineering Cloakware, Inc. email: [EMAIL PROTECTED] phone: 703-752-4836 cell: 571-232-7210 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Benjamin Tomhave Sent: Sunday, November 18, 2007 10:08 AM To: Secure C

Re: [SC-L] OWASP Publicity

2007-11-19 Thread McGovern, James F (HTSC, IT)
The vast majority of IT executives are unfamiliar with all of the principles of security, firewalls, coding, whatever. Are they unfamiliar because of background or they feel that their staff has a handle on it and therefore don't need to pay much atention to it. Both have different characteristi

Re: [SC-L] OWASP Publicity

2007-11-18 Thread Benjamin Tomhave
I agree and disagree with these comments, as I think they possibly represent an outmoded way of thinking when it comes to IT management. Execs and senior mgmt _must_ have a certain understanding of security that will at least give them a basis for making risk decisions. It seems today that they are

Re: [SC-L] OWASP Publicity

2007-11-17 Thread Crispin Cowan
der Mouse wrote: >> The vast majority of IT executives are unfamiliar with all of the >> principles of security, firewalls, coding, whatever. >> > ... > >> The important thing to understand is that such principles are below >> their granularity; the[y] are *right* to not care about such >>

Re: [SC-L] OWASP Publicity

2007-11-16 Thread Leichter, Jerry
| ...I've never understood why it is that managers who would never dream | of second-guessing an electrician about electrical wiring, a | construction engineer about wall bracing, a mechanic about car | repairs, will not hesitate to believe - or at least act as though they | believe - they know bet

Re: [SC-L] OWASP Publicity

2007-11-16 Thread der Mouse
> The vast majority of IT executives are unfamiliar with all of the > principles of security, firewalls, coding, whatever. > The important thing to understand is that such principles are below > their granularity; the[y] are *right* to not care about such > principles, because they can't do anythi

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Gary McGraw
d and grow, and we need to keep the good work coming. gem - Original Message - From: [EMAIL PROTECTED] <[EMAIL PROTECTED]> To: James McGovern <[EMAIL PROTECTED]>; Secure Mailing List Sent: Thu Nov 15 15:46:13 2007 Subject: Re: [SC-L] OWASP Publicity Local boy makes

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Bernie Rosen
-L] OWASP Publicity McGovern, James F (HTSC, IT) wrote: > I have observed an interesting behavior in that the vast majority of > IT executives still haven't heard about the principles behind secure > coding. My take says that we are publishing information in all the > wrong plac

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Crispin Cowan
McGovern, James F (HTSC, IT) wrote: > I have observed an interesting behavior in that the vast majority of IT > executives still haven't heard about the principles behind secure > coding. My take says that we are publishing information in all the wrong > places. IT executives don't really read ACM,

Re: [SC-L] OWASP Publicity

2007-11-15 Thread Gunnar Peterson
Local boy makes good http://online.wsj.com/article/0,,SB112128453130584810,00-search.html -gp On 11/15/07 10:25 AM, "McGovern, James F (HTSC, IT)" <[EMAIL PROTECTED]> wrote: > I have observed an interesting behavior in that the vast majority of IT > executives still haven't heard about the pri

[SC-L] OWASP Publicity

2007-11-15 Thread McGovern, James F (HTSC, IT)
I have observed an interesting behavior in that the vast majority of IT executives still haven't heard about the principles behind secure coding. My take says that we are publishing information in all the wrong places. IT executives don't really read ACM, IEEE or other the sporadic posting from blo