On "Incident management in the age of compliance"

I wrote this fun paper "Incident Management in the Age of Compliance" that covers "the basics of incident response and related them to three major regulations that directly affect the specifics of setting up incident response capabilities."

Here is also a bit of musing inspired by the above: I've been doing a lot more of a strategic, management-level writing, possibly at the expense of bits-bytes-hexes writing. Should I go back and finish that outbound firewall log analysis paper...? :-)