<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: A Curmudgeon is a Little Confused by the 2009 DBIR</title>
	<atom:link href="http://newschoolsecurity.com/2009/04/a-curmudgeon-is-a-little-confused-by-the-2009-dbir/feed/" rel="self" type="application/rss+xml" />
	<link>http://newschoolsecurity.com/2009/04/a-curmudgeon-is-a-little-confused-by-the-2009-dbir/</link>
	<description>The Blog Inspired By The Book</description>
	<lastBuildDate>Thu, 11 Mar 2010 18:24:24 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Wade Baker</title>
		<link>http://newschoolsecurity.com/2009/04/a-curmudgeon-is-a-little-confused-by-the-2009-dbir/#comment-23</link>
		<dc:creator>Wade Baker</dc:creator>
		<pubDate>Mon, 20 Apr 2009 17:04:16 +0000</pubDate>
		<guid isPermaLink="false">http://newschoolsecurity.com/?p=76#comment-23</guid>
		<description>@Brooke - This will be my only reply to your post as I do not wish to engage beyond that. I will simply say that I believe that if you took the time to do more than a &quot;quick perusal&quot; of the report before blogging your &quot;analysis&quot;, you would find that most of your hang-ups are either directly answered in the report or easily deduced from what is there. The lack of loss information is addressed in a recent post (http://securityblog.verizonbusiness.com/2009/04/16/to-dbir-show-me-the-money/).

I&#039;m not saying the the DBIR is perfect and I&#039;m all ears for helpful criticism as well as informed, rational, well-considered debate, but - in my opinion - this represents none of the above.</description>
		<content:encoded><![CDATA[<p>@Brooke &#8211; This will be my only reply to your post as I do not wish to engage beyond that. I will simply say that I believe that if you took the time to do more than a &#8220;quick perusal&#8221; of the report before blogging your &#8220;analysis&#8221;, you would find that most of your hang-ups are either directly answered in the report or easily deduced from what is there. The lack of loss information is addressed in a recent post (<a href="http://securityblog.verizonbusiness.com/2009/04/16/to-dbir-show-me-the-money/" rel="nofollow">http://securityblog.verizonbusiness.com/2009/04/16/to-dbir-show-me-the-money/</a>).</p>
<p>I&#8217;m not saying the the DBIR is perfect and I&#8217;m all ears for helpful criticism as well as informed, rational, well-considered debate, but &#8211; in my opinion &#8211; this represents none of the above.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Interesting Information Security Bits for 04/16/2009 &#124; Infosec Ramblings</title>
		<link>http://newschoolsecurity.com/2009/04/a-curmudgeon-is-a-little-confused-by-the-2009-dbir/#comment-19</link>
		<dc:creator>Interesting Information Security Bits for 04/16/2009 &#124; Infosec Ramblings</dc:creator>
		<pubDate>Thu, 16 Apr 2009 20:19:33 +0000</pubDate>
		<guid isPermaLink="false">http://newschoolsecurity.com/?p=76#comment-19</guid>
		<description>[...] thoughts on the DBIR. A Curmudgeon is a Little Confused by the 2009 DBIR &lt;&lt; The New School of Information Security Tags: ( reports vbr2009 [...]</description>
		<content:encoded><![CDATA[<p>[...] thoughts on the DBIR. A Curmudgeon is a Little Confused by the 2009 DBIR &lt;&lt; The New School of Information Security Tags: ( reports vbr2009 [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
