際際滷

際際滷Share a Scribd company logo
Limits
Not rails
About groups, rules and defectors
Jurgen van der Vlugt
Dialogues House Amsterdam, 6 June 2013
Introduction
 Jurgen = Ir.drs. J. van der Vlugt RE CISA CRISC
 Plus the usual disclaimer that this is Work In Progress
 So, questions please
Agenda
 Rails
 Rubbish
 Reactions
 Radicals
 Guiding rails
 Risk Management
Rails
Rails
People-less Process & Technology
Rubbish
ISSA NL event 2013 06 06 Limits, Not Rails
ISSA NL event 2013 06 06 Limits, Not Rails
(FUD)
ISSA NL event 2013 06 06 Limits, Not Rails
ISSA NL event 2013 06 06 Limits, Not Rails
ISSA NL event 2013 06 06 Limits, Not Rails
ISSA NL event 2013 06 06 Limits, Not Rails
Reactions to rules
Response
Range
Reaction;
ratio (!) and psycho
ISSA NL event 2013 06 06 Limits, Not Rails
Radicals
 Extremist-bureaucrats
 Defectors
 ALWAYS
 They belong!
 Keep it fresh!
 So keep them close?
Freedom through guiding rails
De scheef is niet van caouchouc
Guiding rails
Societal pressures; effective design
 Understand the societal dilemma
 Consider all four societal pressures
 Pay attention to scale
 Foster empathy & community
 Use security systems to scale
 Harmonize institutional pressures
 Ensure fin.penalties ~ detection likelihood
 Choose general, reactive sec.systems
 Reduce power concentrations
 Require transparency
ISSA NL event 2013 06 06 Limits, Not Rails
Clear requirements
ISSA NL event 2013 06 06 Limits, Not Rails
ISSA NL event 2013 06 06 Limits, Not Rails
ISSA NL event 2013 06 06 Limits, Not Rails
Resilience
Pt > Dt + Rt
(Pt > 0)
E = Dt + Rt
(Pt = 0) 
Zero-day exploits, or
any unknown vectors
(Note:
 Clusterfucks
 FUQed
Boy scout model!
Guiding rails
ISSA NL event 2013 06 06 Limits, Not Rails
ISSA NL event 2013 06 06 Limits, Not Rails
Conclusion: Risk Management
 Biases (list)
 Notice the weak signals
 Be creative
 Dont be a dictator (guiding rails)
 Clear requirements
 Be Prepared!
Hope you enjoy(ed) the ride
That was all. Thank you.
ISSA NL event 2013 06 06 Limits, Not Rails
Dank u
Further Reading
 Jvdvlugt@maverisk.nl
 LinkedIn http://nl.linkedin.com/in/jurgenvandervlugt/
 Twitter @jvdvlugt
 (G+, Pinterest, Tumblr, etc.etc.)
I hate quotations (Ralph Waldo Emerson 1849, quoted by Rem Koolhaas in S, M, L, XL, 1995)
Contact details
Dogma: The problem starts at the secondary level, not with the
originator or the developer of the idea but with the people who are
attracted by it, who cling to it until their last nail breaks, and who
invariably lack the overview, flexibility, imagination, and, most
importantly, sense of humor, to maintain it in the spirit in which it was
hatched. Ideas are made by masters, dogma by disciples, and the
Buddha is always killed on the road. (Tom Robbins, Still Life with
Woodpecker, 1984)

More Related Content

Similar to ISSA NL event 2013 06 06 Limits, Not Rails (20)

Ks fs for webster graduate students
Ks fs for webster graduate studentsKs fs for webster graduate students
Ks fs for webster graduate students
Steve Foster
An introduction to integrative thinking bit14 share
An introduction to integrative thinking bit14 shareAn introduction to integrative thinking bit14 share
An introduction to integrative thinking bit14 share
Heidi Siwak
Personalities - MBTI
Personalities - MBTIPersonalities - MBTI
Personalities - MBTI
Hany Magdy Mustafa
Gislen Cultural Challenges seminar
Gislen Cultural Challenges  seminarGislen Cultural Challenges  seminar
Gislen Cultural Challenges seminar
Mikael Gisl辿n
Surrounded by idiots
Surrounded by idiotsSurrounded by idiots
Surrounded by idiots
Manuel Torres
Disc or jedi mind tricks?
Disc or jedi mind tricks?Disc or jedi mind tricks?
Disc or jedi mind tricks?
David Guest
Polarity Thinking_CoCreative Consulting_20 March 2014
Polarity Thinking_CoCreative Consulting_20 March 2014Polarity Thinking_CoCreative Consulting_20 March 2014
Polarity Thinking_CoCreative Consulting_20 March 2014
United Nations Development Programme
Whole Brain Learning
Whole Brain LearningWhole Brain Learning
Whole Brain Learning
Charles Audley
Creative thinking
Creative thinkingCreative thinking
Creative thinking
Bedoha
Media Theory and Theorists for G325
Media Theory and Theorists for G325Media Theory and Theorists for G325
Media Theory and Theorists for G325
Jack Suddaby
Leadership and librarians
Leadership and librariansLeadership and librarians
Leadership and librarians
FEBAB
Brazil July 2013
Brazil July 2013Brazil July 2013
Brazil July 2013
Stephen Abram
Sowing the Seeds of Diversity
Sowing the Seeds of DiversitySowing the Seeds of Diversity
Sowing the Seeds of Diversity
dreamwidth
Thinking about "Thinking"
Thinking about "Thinking"Thinking about "Thinking"
Thinking about "Thinking"
Edward B. Rockower
vBrownBag Presentation
vBrownBag PresentationvBrownBag Presentation
vBrownBag Presentation
Jon Hildebrand
It's complicated
It's complicatedIt's complicated
It's complicated
Christina Wodtke
Its Complicated Designing in The Age Of Emergence (by Christina Wodtke at ...
Its Complicated  Designing in The Age Of Emergence (by Christina Wodtke at ...Its Complicated  Designing in The Age Of Emergence (by Christina Wodtke at ...
Its Complicated Designing in The Age Of Emergence (by Christina Wodtke at ...
Northern User Experience
How to mistrust a scientific paper
How to mistrust a scientific paperHow to mistrust a scientific paper
How to mistrust a scientific paper
Leonid Schneider
Ambassador all day training 2
Ambassador all day training 2Ambassador all day training 2
Ambassador all day training 2
Hannahmk12
Cargo Cult Agile training & coaching
Cargo Cult Agile training & coachingCargo Cult Agile training & coaching
Cargo Cult Agile training & coaching
Jose Luis Soria
Ks fs for webster graduate students
Ks fs for webster graduate studentsKs fs for webster graduate students
Ks fs for webster graduate students
Steve Foster
An introduction to integrative thinking bit14 share
An introduction to integrative thinking bit14 shareAn introduction to integrative thinking bit14 share
An introduction to integrative thinking bit14 share
Heidi Siwak
Gislen Cultural Challenges seminar
Gislen Cultural Challenges  seminarGislen Cultural Challenges  seminar
Gislen Cultural Challenges seminar
Mikael Gisl辿n
Surrounded by idiots
Surrounded by idiotsSurrounded by idiots
Surrounded by idiots
Manuel Torres
Disc or jedi mind tricks?
Disc or jedi mind tricks?Disc or jedi mind tricks?
Disc or jedi mind tricks?
David Guest
Whole Brain Learning
Whole Brain LearningWhole Brain Learning
Whole Brain Learning
Charles Audley
Creative thinking
Creative thinkingCreative thinking
Creative thinking
Bedoha
Media Theory and Theorists for G325
Media Theory and Theorists for G325Media Theory and Theorists for G325
Media Theory and Theorists for G325
Jack Suddaby
Leadership and librarians
Leadership and librariansLeadership and librarians
Leadership and librarians
FEBAB
Sowing the Seeds of Diversity
Sowing the Seeds of DiversitySowing the Seeds of Diversity
Sowing the Seeds of Diversity
dreamwidth
vBrownBag Presentation
vBrownBag PresentationvBrownBag Presentation
vBrownBag Presentation
Jon Hildebrand
Its Complicated Designing in The Age Of Emergence (by Christina Wodtke at ...
Its Complicated  Designing in The Age Of Emergence (by Christina Wodtke at ...Its Complicated  Designing in The Age Of Emergence (by Christina Wodtke at ...
Its Complicated Designing in The Age Of Emergence (by Christina Wodtke at ...
Northern User Experience
How to mistrust a scientific paper
How to mistrust a scientific paperHow to mistrust a scientific paper
How to mistrust a scientific paper
Leonid Schneider
Ambassador all day training 2
Ambassador all day training 2Ambassador all day training 2
Ambassador all day training 2
Hannahmk12
Cargo Cult Agile training & coaching
Cargo Cult Agile training & coachingCargo Cult Agile training & coaching
Cargo Cult Agile training & coaching
Jose Luis Soria

More from Jurgen van der Vlugt (14)

Much Data 0.95
Much Data 0.95Much Data 0.95
Much Data 0.95
Jurgen van der Vlugt
Risk Managers Of The Universe
Risk Managers Of The UniverseRisk Managers Of The Universe
Risk Managers Of The Universe
Jurgen van der Vlugt
ACAM-VDA NOREA Adviesdiensten 21 juni 2012
ACAM-VDA NOREA Adviesdiensten 21 juni 2012ACAM-VDA NOREA Adviesdiensten 21 juni 2012
ACAM-VDA NOREA Adviesdiensten 21 juni 2012
Jurgen van der Vlugt
Adviesdiensten Norea Regio Noord 2012 05 10
Adviesdiensten Norea Regio Noord 2012 05 10Adviesdiensten Norea Regio Noord 2012 05 10
Adviesdiensten Norea Regio Noord 2012 05 10
Jurgen van der Vlugt
Van Plank Misslaan Naar Spijker Op De Kop V0.3
Van Plank Misslaan Naar Spijker Op De Kop V0.3Van Plank Misslaan Naar Spijker Op De Kop V0.3
Van Plank Misslaan Naar Spijker Op De Kop V0.3
Jurgen van der Vlugt
Advies Assurance September 2011 V0.97
Advies Assurance September 2011 V0.97Advies Assurance September 2011 V0.97
Advies Assurance September 2011 V0.97
Jurgen van der Vlugt
VU Information Risk Management Security Management 2010 JvdV
VU Information Risk Management  Security Management 2010 JvdVVU Information Risk Management  Security Management 2010 JvdV
VU Information Risk Management Security Management 2010 JvdV
Jurgen van der Vlugt
VU Organisatie van het beroep Reglementering Deel I 21 mei 2010
VU Organisatie van het beroep   Reglementering Deel I 21 mei 2010VU Organisatie van het beroep   Reglementering Deel I 21 mei 2010
VU Organisatie van het beroep Reglementering Deel I 21 mei 2010
Jurgen van der Vlugt
VU Uitvoering van de audit 28 mei 2010
VU Uitvoering van de audit 28 mei 2010VU Uitvoering van de audit 28 mei 2010
VU Uitvoering van de audit 28 mei 2010
Jurgen van der Vlugt
Saxion Ensched辿 College Security 2009
Saxion Ensched辿 College Security 2009Saxion Ensched辿 College Security 2009
Saxion Ensched辿 College Security 2009
Jurgen van der Vlugt
NOREA Update congres 2007 incl notes
NOREA Update congres 2007 incl notesNOREA Update congres 2007 incl notes
NOREA Update congres 2007 incl notes
Jurgen van der Vlugt
NOREA ALV Symposium Advies 2010
NOREA ALV Symposium Advies 2010NOREA ALV Symposium Advies 2010
NOREA ALV Symposium Advies 2010
Jurgen van der Vlugt
NOREA Regiosessie Reglementen 2010
NOREA Regiosessie Reglementen 2010NOREA Regiosessie Reglementen 2010
NOREA Regiosessie Reglementen 2010
Jurgen van der Vlugt
Saxion Ensched辿 College Security 2010
Saxion Ensched辿 College Security 2010Saxion Ensched辿 College Security 2010
Saxion Ensched辿 College Security 2010
Jurgen van der Vlugt
ACAM-VDA NOREA Adviesdiensten 21 juni 2012
ACAM-VDA NOREA Adviesdiensten 21 juni 2012ACAM-VDA NOREA Adviesdiensten 21 juni 2012
ACAM-VDA NOREA Adviesdiensten 21 juni 2012
Jurgen van der Vlugt
Adviesdiensten Norea Regio Noord 2012 05 10
Adviesdiensten Norea Regio Noord 2012 05 10Adviesdiensten Norea Regio Noord 2012 05 10
Adviesdiensten Norea Regio Noord 2012 05 10
Jurgen van der Vlugt
Van Plank Misslaan Naar Spijker Op De Kop V0.3
Van Plank Misslaan Naar Spijker Op De Kop V0.3Van Plank Misslaan Naar Spijker Op De Kop V0.3
Van Plank Misslaan Naar Spijker Op De Kop V0.3
Jurgen van der Vlugt
Advies Assurance September 2011 V0.97
Advies Assurance September 2011 V0.97Advies Assurance September 2011 V0.97
Advies Assurance September 2011 V0.97
Jurgen van der Vlugt
VU Information Risk Management Security Management 2010 JvdV
VU Information Risk Management  Security Management 2010 JvdVVU Information Risk Management  Security Management 2010 JvdV
VU Information Risk Management Security Management 2010 JvdV
Jurgen van der Vlugt
VU Organisatie van het beroep Reglementering Deel I 21 mei 2010
VU Organisatie van het beroep   Reglementering Deel I 21 mei 2010VU Organisatie van het beroep   Reglementering Deel I 21 mei 2010
VU Organisatie van het beroep Reglementering Deel I 21 mei 2010
Jurgen van der Vlugt
VU Uitvoering van de audit 28 mei 2010
VU Uitvoering van de audit 28 mei 2010VU Uitvoering van de audit 28 mei 2010
VU Uitvoering van de audit 28 mei 2010
Jurgen van der Vlugt
Saxion Ensched辿 College Security 2009
Saxion Ensched辿 College Security 2009Saxion Ensched辿 College Security 2009
Saxion Ensched辿 College Security 2009
Jurgen van der Vlugt
NOREA Update congres 2007 incl notes
NOREA Update congres 2007 incl notesNOREA Update congres 2007 incl notes
NOREA Update congres 2007 incl notes
Jurgen van der Vlugt
NOREA ALV Symposium Advies 2010
NOREA ALV Symposium Advies 2010NOREA ALV Symposium Advies 2010
NOREA ALV Symposium Advies 2010
Jurgen van der Vlugt
NOREA Regiosessie Reglementen 2010
NOREA Regiosessie Reglementen 2010NOREA Regiosessie Reglementen 2010
NOREA Regiosessie Reglementen 2010
Jurgen van der Vlugt
Saxion Ensched辿 College Security 2010
Saxion Ensched辿 College Security 2010Saxion Ensched辿 College Security 2010
Saxion Ensched辿 College Security 2010
Jurgen van der Vlugt

Recently uploaded (20)

Jatin Mansata - A Leader In Finance And Philanthropy
Jatin Mansata - A Leader In Finance And PhilanthropyJatin Mansata - A Leader In Finance And Philanthropy
Jatin Mansata - A Leader In Finance And Philanthropy
Jatin Mansata
2025 CEO Impact Index: Business Transformation Drives Executive Impact
2025 CEO Impact Index: Business Transformation Drives Executive Impact2025 CEO Impact Index: Business Transformation Drives Executive Impact
2025 CEO Impact Index: Business Transformation Drives Executive Impact
Golin
Norman Cooling - Founder And President Of N.L
Norman Cooling - Founder And President Of N.LNorman Cooling - Founder And President Of N.L
Norman Cooling - Founder And President Of N.L
Norman Cooling
Buy Verified Revolut Account: Secure & USA-Approved!
Buy Verified Revolut Account: Secure & USA-Approved!Buy Verified Revolut Account: Secure & USA-Approved!
Buy Verified Revolut Account: Secure & USA-Approved!
pvaexpress
Your brand might be pushing clients away without you knowing.
Your brand might be pushing clients away without you knowing.Your brand might be pushing clients away without you knowing.
Your brand might be pushing clients away without you knowing.
Group Buy Seo Tools
Quality Certification and Accreditation Ecosystem 1.pptx
Quality Certification and Accreditation Ecosystem 1.pptxQuality Certification and Accreditation Ecosystem 1.pptx
Quality Certification and Accreditation Ecosystem 1.pptx
AbbasKeramati2
No Objection Letter, No Objection Certificate
No Objection Letter, No Objection CertificateNo Objection Letter, No Objection Certificate
No Objection Letter, No Objection Certificate
SeemaAgrawal43
Final_Detailed_Chapter_2_Presentation.pptx
Final_Detailed_Chapter_2_Presentation.pptxFinal_Detailed_Chapter_2_Presentation.pptx
Final_Detailed_Chapter_2_Presentation.pptx
IgoFebrianto1
20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...
20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...
20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...
FINNOMENAMarketing
Exploring the creativity problem- mind maps.pdf
Exploring the creativity problem- mind maps.pdfExploring the creativity problem- mind maps.pdf
Exploring the creativity problem- mind maps.pdf
P&CO
Taylor Swift The Man Music Video Production
Taylor Swift The Man Music Video ProductionTaylor Swift The Man Music Video Production
Taylor Swift The Man Music Video Production
eclark941
Runnin Digital community - Linkedin & FB
Runnin Digital community  - Linkedin & FBRunnin Digital community  - Linkedin & FB
Runnin Digital community - Linkedin & FB
Nir Makovsky
REACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCY
REACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCYREACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCY
REACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCY
leooscar735
Creativity, AI, and Human-Centered Innovation
Creativity, AI, and Human-Centered InnovationCreativity, AI, and Human-Centered Innovation
Creativity, AI, and Human-Centered Innovation
Raj Lal
BPR: Decode, Segment, and Excel Beyond Success
BPR: Decode, Segment, and Excel Beyond SuccessBPR: Decode, Segment, and Excel Beyond Success
BPR: Decode, Segment, and Excel Beyond Success
Vipin Srivastava
Oleksandr Krakovetskyi: 亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)
Oleksandr Krakovetskyi:  亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)Oleksandr Krakovetskyi:  亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)
Oleksandr Krakovetskyi: 亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)
Lviv Startup Club
What PE Teachers and PEX Professionals Have in Common
What PE Teachers and PEX Professionals Have in CommonWhat PE Teachers and PEX Professionals Have in Common
What PE Teachers and PEX Professionals Have in Common
KaiNexus
Will-Skill Matrix PowerPoint Template and Guide
Will-Skill Matrix PowerPoint Template and GuideWill-Skill Matrix PowerPoint Template and Guide
Will-Skill Matrix PowerPoint Template and Guide
Aurelien Domont, MBA
Prof. Paul Allieu Kamara- CV (1) 2025.pdf
Prof. Paul Allieu Kamara- CV (1) 2025.pdfProf. Paul Allieu Kamara- CV (1) 2025.pdf
Prof. Paul Allieu Kamara- CV (1) 2025.pdf
PROF. PAUL ALLIEU KAMARA
CCleaner Pro 6.33 Crack + Key Free Download 2025
CCleaner Pro 6.33 Crack + Key Free Download 2025CCleaner Pro 6.33 Crack + Key Free Download 2025
CCleaner Pro 6.33 Crack + Key Free Download 2025
kortez3
Jatin Mansata - A Leader In Finance And Philanthropy
Jatin Mansata - A Leader In Finance And PhilanthropyJatin Mansata - A Leader In Finance And Philanthropy
Jatin Mansata - A Leader In Finance And Philanthropy
Jatin Mansata
2025 CEO Impact Index: Business Transformation Drives Executive Impact
2025 CEO Impact Index: Business Transformation Drives Executive Impact2025 CEO Impact Index: Business Transformation Drives Executive Impact
2025 CEO Impact Index: Business Transformation Drives Executive Impact
Golin
Norman Cooling - Founder And President Of N.L
Norman Cooling - Founder And President Of N.LNorman Cooling - Founder And President Of N.L
Norman Cooling - Founder And President Of N.L
Norman Cooling
Buy Verified Revolut Account: Secure & USA-Approved!
Buy Verified Revolut Account: Secure & USA-Approved!Buy Verified Revolut Account: Secure & USA-Approved!
Buy Verified Revolut Account: Secure & USA-Approved!
pvaexpress
Your brand might be pushing clients away without you knowing.
Your brand might be pushing clients away without you knowing.Your brand might be pushing clients away without you knowing.
Your brand might be pushing clients away without you knowing.
Group Buy Seo Tools
Quality Certification and Accreditation Ecosystem 1.pptx
Quality Certification and Accreditation Ecosystem 1.pptxQuality Certification and Accreditation Ecosystem 1.pptx
Quality Certification and Accreditation Ecosystem 1.pptx
AbbasKeramati2
No Objection Letter, No Objection Certificate
No Objection Letter, No Objection CertificateNo Objection Letter, No Objection Certificate
No Objection Letter, No Objection Certificate
SeemaAgrawal43
Final_Detailed_Chapter_2_Presentation.pptx
Final_Detailed_Chapter_2_Presentation.pptxFinal_Detailed_Chapter_2_Presentation.pptx
Final_Detailed_Chapter_2_Presentation.pptx
IgoFebrianto1
20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...
20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...
20250305_A. Stotz All Weather Strategy - Weights update & Performance review ...
FINNOMENAMarketing
Exploring the creativity problem- mind maps.pdf
Exploring the creativity problem- mind maps.pdfExploring the creativity problem- mind maps.pdf
Exploring the creativity problem- mind maps.pdf
P&CO
Taylor Swift The Man Music Video Production
Taylor Swift The Man Music Video ProductionTaylor Swift The Man Music Video Production
Taylor Swift The Man Music Video Production
eclark941
Runnin Digital community - Linkedin & FB
Runnin Digital community  - Linkedin & FBRunnin Digital community  - Linkedin & FB
Runnin Digital community - Linkedin & FB
Nir Makovsky
REACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCY
REACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCYREACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCY
REACH OUT TO SALVAGE ASSET RECOVERY TO RECOVER SCAM OR STOLEN CRYPTOCURRENCY
leooscar735
Creativity, AI, and Human-Centered Innovation
Creativity, AI, and Human-Centered InnovationCreativity, AI, and Human-Centered Innovation
Creativity, AI, and Human-Centered Innovation
Raj Lal
BPR: Decode, Segment, and Excel Beyond Success
BPR: Decode, Segment, and Excel Beyond SuccessBPR: Decode, Segment, and Excel Beyond Success
BPR: Decode, Segment, and Excel Beyond Success
Vipin Srivastava
Oleksandr Krakovetskyi: 亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)
Oleksandr Krakovetskyi:  亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)Oleksandr Krakovetskyi:  亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)
Oleksandr Krakovetskyi: 亞仍磲 亞亠仆亠舒亳于仆亳 仄仂亟亠仍亠亶 亰 仄从于舒仆仆礆 (UA)
Lviv Startup Club
What PE Teachers and PEX Professionals Have in Common
What PE Teachers and PEX Professionals Have in CommonWhat PE Teachers and PEX Professionals Have in Common
What PE Teachers and PEX Professionals Have in Common
KaiNexus
Will-Skill Matrix PowerPoint Template and Guide
Will-Skill Matrix PowerPoint Template and GuideWill-Skill Matrix PowerPoint Template and Guide
Will-Skill Matrix PowerPoint Template and Guide
Aurelien Domont, MBA
Prof. Paul Allieu Kamara- CV (1) 2025.pdf
Prof. Paul Allieu Kamara- CV (1) 2025.pdfProf. Paul Allieu Kamara- CV (1) 2025.pdf
Prof. Paul Allieu Kamara- CV (1) 2025.pdf
PROF. PAUL ALLIEU KAMARA
CCleaner Pro 6.33 Crack + Key Free Download 2025
CCleaner Pro 6.33 Crack + Key Free Download 2025CCleaner Pro 6.33 Crack + Key Free Download 2025
CCleaner Pro 6.33 Crack + Key Free Download 2025
kortez3

ISSA NL event 2013 06 06 Limits, Not Rails

  • 1. Limits Not rails About groups, rules and defectors Jurgen van der Vlugt Dialogues House Amsterdam, 6 June 2013
  • 2. Introduction Jurgen = Ir.drs. J. van der Vlugt RE CISA CRISC Plus the usual disclaimer that this is Work In Progress So, questions please
  • 3. Agenda Rails Rubbish Reactions Radicals Guiding rails Risk Management
  • 16. Range
  • 19. Radicals Extremist-bureaucrats Defectors ALWAYS They belong! Keep it fresh! So keep them close?
  • 20. Freedom through guiding rails De scheef is niet van caouchouc
  • 22. Societal pressures; effective design Understand the societal dilemma Consider all four societal pressures Pay attention to scale Foster empathy & community Use security systems to scale Harmonize institutional pressures Ensure fin.penalties ~ detection likelihood Choose general, reactive sec.systems Reduce power concentrations Require transparency
  • 29. Pt > Dt + Rt (Pt > 0) E = Dt + Rt (Pt = 0) Zero-day exploits, or any unknown vectors (Note: Clusterfucks FUQed Boy scout model! Guiding rails
  • 32. Conclusion: Risk Management Biases (list) Notice the weak signals Be creative Dont be a dictator (guiding rails) Clear requirements Be Prepared!
  • 33. Hope you enjoy(ed) the ride That was all. Thank you.
  • 37. Jvdvlugt@maverisk.nl LinkedIn http://nl.linkedin.com/in/jurgenvandervlugt/ Twitter @jvdvlugt (G+, Pinterest, Tumblr, etc.etc.) I hate quotations (Ralph Waldo Emerson 1849, quoted by Rem Koolhaas in S, M, L, XL, 1995) Contact details Dogma: The problem starts at the secondary level, not with the originator or the developer of the idea but with the people who are attracted by it, who cling to it until their last nail breaks, and who invariably lack the overview, flexibility, imagination, and, most importantly, sense of humor, to maintain it in the spirit in which it was hatched. Ideas are made by masters, dogma by disciples, and the Buddha is always killed on the road. (Tom Robbins, Still Life with Woodpecker, 1984)