The Attributer’s Blog – Business Context Aligned

The British Computer Society June newsletter featured an article by Neil Cordell. The article opens with the following statement: “When it comes to dealing with cyber security, technologists must focus more on threats and controls and less on risk”. Mr. Cordell is concerned that implementing security controls is entirely in the hands of technologists, who have no real idea of […]

The Attributer’s Blog – Time-Trusted

The Attributer and his Wife enjoy watching television for relaxation and they often watch ‘detective’ programmes. Recently one such programme focused on a plot that revolves around knowing what time it really is. It served as a reminder that this aspect of security is as important today as ever it was, even though it’s an old and well-known theme. If […]

The Attributer’s Blog – Process Controlled

The Attributer was recently at a client meeting where the conversation turned to the meaning of the term ‘information assurance’ and the scope of its application. Doubt was expressed as to whether the term includes the security and assurance of industrial control systems (ICS), supervisory control and data acquisition (SCADA) and industrial programmable logic controllers (PLCs). There is a historical […]

The Attributer’s Blog – Justified

Sometimes when applying SABSA Business Attributes to a business scenario we need to consider some deeply philosophical and moral issues. This time we shall examine the attribute ‘justified’ in the context of what sort of security surveillance should we allow our governments to carry out and how does this conflict with the right of citizens to personal privacy. Recently on […]