If you’ve been in the information security field for at least a year, you’ve undoubtedly heard your organization defend the lack of investment in, change to or optimization of a cybersecurity policy, mitigating control or organizational belief. This “It hasn’t happened to us so it likely won’t happen” mentality is called optimism bias, and it’s an issue in our field that predates the field itself.
Richard Clarke, former George W. Bush-era cybersecurity czar and author of both fiction and nonfiction books related to cyber security and terrorism, has joined the board of directors at application whitelisting vendor Bit9.