BSIMM2 is the 30 firm version of BSIMM. I wrote up an article with Brian Chess and Sammy Migues (my BSIMM co-creators) called "

I read a question on one of the cloud mailing lists asking which of the federated authentication protocols (SAML, OpenID, Oauth, WRAP, etc) would win....

Apparently the time has come to re-release the SANS/CWE 25 — something that we can expect annually. The good news is that exercises...

I had been reading about Gartner’s prediction that 1 out of every 5 businesses were going to dump all of their physical IT infrastructure...

The BSIMM study data set has more than tripled in size and now includes data from 30 firms. We are busy working with...