March 4, 2008
Julia Allen was in town last week to meet with Q-CERT staff and to do a presentation on information security governance at the Qatar Information Security Forum (QISF). In her presentation, Julia talked about what it takes to build a business case for information security and how to determine its return on investment. She also identified key questions for senior leaders to ask of their business managers, CIO, and IT staff when determining how successful their information security strategy is. View the slides from Julia's presentation.
While in Qatar, Julia was interviewed by David Mundie, Q-CERT's manager for Outreach and Training. David asked her some challenging questions, such as "Do you agree that information security is a total failure?" and "Aren't security policies a waste of time?" Be sure to hear her answers on the latest Q-CERT podcast.