close

What Is Truth to Power?

dedicated to bridging the gaps between governance and practice, technology and business, regulation and control, risk management and real market pressures, and your own knowledge and the knowledge of your peers.
built to create a common pool of knowledge—one big brain—that lets you work more efficiently, build technology and business practices more effectively, and endure audits more effortlessly.
a neutral hub through which you can reach many valuable information nodes, resource collections, and organizations that are helping people like you already, but in fractured ways.
against the idea that auditors, analysts, and consultancies can control information simply through their ability to collect and distill it. T2P's goal is to unlock the vast body of knowledge, insight, and conventional wisdom that we all have, make it freely available to you, and help you digest and interpret it—without undue cost, bias, or hype.
Top Panel
WHAT IS T2P?
Top Panel
How not to attract a qualified security manager

One of the most popular news items we covered today recently is a new report on the shortage of information security pros in government. (PDF here, summary here.) I read the report, then went to the US Government jobs site to see what they had posted.

Turns out, the US Navy has lots of information security positions posted for the Seattle area, where T2P is based, and each ad has desperation written right into it:

"This notice is issued under the direct-hire authority to recruit new talent to occupations for which Department of the Navy has a severe shortage of candidates or a critical hiring need."

So, that should get things rolling.

Or not. Click the "to apply" link, and you get this:

 

 

This is, of course, a shining example of how bad security management stymies good security management.

You can ignore the SSL warnings and proceed to the Navy's jobs site. If you do,you should be disqualified from any security job there.