Media »

In the News

Press Releases

Opinion and Insights

Books and Reports

Press Releases

FOR IMMEDIATE RELEASE:

Good Harbor Report Offers Recommendations for Securing Cyberspace Through International Norms

New report draws on successes of past norms regimes to offer actionable recommendations for securing cyberspace. Report focuses recommendation on specific cyber risks and involving the private sector in developing international norms.

The 21st century has thus far been a period of increasingly sophisticated, serious, and widespread malevolent activity in cyberspace. Cyber crime, cyber espionage, and even cyber war have in recent years become issues of immediate concern to senior government leaders and industry executives, threatening to undermine the great benefits of a globally networked society. Nations have built cyber armies. Cyber criminals have stolen hundreds of billions of dollars worth of personal, business-sensitive, and financial information, largely from the private sector. Those conducting cyber espionage have successfully penetrated both governments and corporations at the highest levels. As a result of these troubling trends, interest has grown among leaders in many countries and companies about the development of international norms concerning cybersecurity.

There are at least six different subjects that fall into the bucket of cybersecurity norms, including Internet governance, Internet freedom, online privacy, cyber espionage, cyber crime, and cyber war. While each of these areas would benefit from widely accepted and clearly defined international agreements, seeking a common negotiating process or regime to articulate norms for all six areas is unlikely to be fruitful. International philosophies and state practices vary significantly on Internet governance, Internet freedom, privacy, and cyber espionage, which suggests that finding agreement will be difficult. However, focusing on cyber crime and cyber war, where interests more closely align, offers a potentially successful path for norm development in the short-term.

Mindful of these competing national interests, Securing Cyberspace Through International Norms offers actionable recommendations on potential cybersecurity norms, drawing on the successes of other norms regimes and the critical nature of the private sector in global cybersecurity. By focusing efforts on specific international cyber risks and including the private sector in the norm creation process, the international community can readily reach agreement on rules of the road, practices and procedures, and confidence building measures that will make cyberspace a safer and more predictable domain.

The report is available at
http://www.goodharbor.net/media/pdfs/SecuringCyberspace_web.pdf

About Good Harbor Security Risk Management:
Good Harbor works with senior corporate executives, investment professionals, and government leaders to assess and develop strategic cybersecurity programs that mitigate organizational risk in the face of advanced cyber threats. Good Harbor's consulting services include the Executive Cybersecurity Risk Profile and Action Plan as well as specialized services in threat awareness, risk assessment, strategy and governance, crisis management and communications, regulatory and policy analysis, thought leadership, and investment diligence. The firm is led by Chairman Richard A. Clarke, a former, senior White House advisor on cybersecurity, counterterrorism, and national security, and the author of Cyber War: The Next Threat to National Security and What To Do About It. To learn more about Good Harbor, visit http://www.goodharbor.net

Contact:
Emilian Papadopoulos
Chief of Staff
Good Harbor Security Risk Management
703-812-9199
contact at goodharbor.net

 

FOR IMMEDIATE RELEASE:

Report by Good Harbor Consulting Addresses Cyber Risk in Critical Infrastructure

New report examines conventional wisdom that developing secure applications for critical infrastructure is cost-prohibitive and time-intensive; growing evidence suggests security development processes offer better return on investment

ARLINGTON, VA, May 15, 2012 - A new report examines the security advantages and market incentives for developing software applications for critical infrastructure through a security development process, concluding that market forces will increasingly drive developers to use such a process even in the absence of new regulatory requirements.

Cyber attacks are a growing risk for critical infrastructure and can impact systems that perform vital societal functions, including energy distribution, banking and finance, and transportation. As critical infrastructure has become increasingly dependent on complex software applications, cyber attacks have frequently targeted vulnerabilities in software applications, with potentially serious consequences for business, public health and safety, the economy, and national security.

Traditional methods for securing critical infrastructure and its applications are no longer adequate. Richard Clarke, former senior White House advisor on cyber security and now chairman of Good Harbor Consulting, has observed, "the strategy of hiding the application as best you can instead of dealing with the weaknesses inherent in the application isn't good risk management. It's a recipe for failure."

Increasingly, market leaders are working to reduce inherent vulnerabilities by adopting security development processes to build security into the application development lifecycle. In addition to achieving improved security, application developers and end users are realizing economic benefits and strong return on their investment. Security development processes have helped developers reduce costs, save time, and differentiate themselves in the marketplace.

The report, Confronting Cyber Risk in Critical Infrastructure: The National and Economic Benefits of Security Development Processes, concludes that as end user and developer awareness of the operational and economic benefits of security development increases, there is reason to believe that adoption of widely accepted best practices will grow, minimizing the number and impact of vulnerabilities in the critical infrastructure application environment.

The report is available at
http://www.goodharbor.net/media/pdfs/Confronting_Cyber_Risk_in_Critical_Infrastructure.pdf

About Good Harbor Consulting:
Good Harbor Consulting provides global strategic risk management services to a wide variety of corporate and government clients. Good Harbor’s Cyber Risk practice develops strategic cybersecurity programs that mitigate organizational risk, providing threat awareness, risk and governance assessment, crisis management, investment diligence, and regulatory/policy counsel. Founded in 2002, Good Harbor Consulting is led by Richard A. Clarke, an expert and former White House senior advisor on homeland security, national security, cybersecurity, and counterterrorism. To learn more about Good Harbor Consulting, visit http://www.goodharbor.net.

Contact:
Emilian Papadopoulos
Chief of Staff
Good Harbor Consulting
703-812-9199
contact@goodharbor.net

 

FOR IMMEDIATE RELEASE:

Industrial Defender and Good Harbor Consulting Announce Critical Infrastructure Cyber Security Alliance

Depth of technology and consulting services expertise provide unmatched capabilities to infrastructure owners and operators

FOXBOROUGH, MA and ARLINGTON, VA, March 26, 2012 - Industrial Defender, the leading global provider of security, compliance and change management solutions for automation systems, and Good Harbor Consulting, a leading provider of global strategic cyber risk management services, today announced an alliance whereby both companies will collaborate to help critical infrastructure operators improve their cybersecurity posture in the face of advanced threats.

The deployment and networking of information technology in critical infrastructure and the ever-changing threat and regulatory environments create new cyber risks for infrastructure owners and operators. As a result of this alliance, owners and operators of critical infrastructure will benefit from seamless pairing of the services offered by Industrial Defender and Good Harbor. Industrial Defender’s technology solutions monitor, manage, and protect critical infrastructure. Good Harbor helps corporate executives implement strategic risk management and governance programs, plan for and respond to crisis events, manage vendor risk, and understand emerging regulatory and policy issues.

“The cyber security and compliance challenges associated with protecting vital infrastructure are extremely complex, and there’s no ‘silver bullet’ for solving these challenges,” said Brian Ahern, president and chief executive officer of Industrial Defender. “By leveraging our decade of experience solving security issues for critical infrastructure asset owners and Good Harbor’s deep expertise in strategic cyber risk consulting, organizations will have an unmatched ability to identify, understand and address security risks. Our nation’s infrastructure will be safer and more reliable as a result.”

Richard Clarke, chairman and chief executive officer of Good Harbor Consulting, observed, “Business executives are on the front line in our national effort to protect critical infrastructure. To succeed, they need a balanced solution that integrates strategy and technology. By pairing Good Harbor’s established cyber risk consulting with Industrial Defender’s industry-leading technology offering, executives can manage dynamic cyber risks and protect our society’s most critical systems.”

About Industrial Defender
Industrial Defender is the global leader in automation system management. For more than a decade, the company has successfully developed and delivered solutions for operators of industrial control systems. With deep domain expertise built in, Industrial Defender products enable customers to ensure the availability and reliability of their key industrial processes. Leveraging the industry’s first unified platform for security, compliance and change management, Industrial Defender solutions enable customers to reduce costs and risks, and enhance operational excellence. Over 400 companies in 21 countries rely on Industrial Defender technology to monitor, manage and protect their operations and processes.

For more information, visit Industrial Defender’s website, connect on LinkedIn and follow Industrial Defender on Twitter.

About Good Harbor Consulting
Good Harbor Consulting provides global strategic risk management services to a wide variety of corporate and government clients. Good Harbor’s cyber risk practice develops strategic cybersecurity programs that mitigate organizational risk, providing threat awareness, risk and governance assessment, crisis management, investment diligence, and regulatory/policy counsel. Founded in 2002, Good Harbor Consulting is led by Richard A. Clarke, an expert on homeland security, national security, cybersecurity, and counterterrorism. To learn more about Good Harbor Consulting, visit http://www.goodharbor.net.

Contacts:

 

FOR IMMEDIATE RELEASE:

Mandiant and Good Harbor Consulting Announce Alliance

Arlington, Va. - Jan. 9, 2012 - MANDIANT, the leader in advanced threat detection and response solutions, and Good Harbor Consulting, a leading provider of global strategic risk management services, today announced an alliance whereby both companies will collaborate on joint solutions designed to help organizations protect themselves from targeted cyber threats.

"Every day, sophisticated hackers steal valuable intellectual property from companies around the world," said Richard Clarke, chairman and chief executive officer of Good Harbor Consulting. "The best known brands in the world put their trust in MANDIANT to protect themselves from targeted attacks. We are excited to partner with them."

Under the alliance, MANDIANT gains the ability to offer consulting services on corporate risk governance, crisis management planning, vendor risk management, and emerging regulatory and policy issues to clients. At the same time, Good Harbor Consulting gains access to MANDIANT’s expert knowledge on detecting, responding and containing advanced targeted threats.

"The reality is that in today’s environment, security breaches are inevitable," said Travis Reese, chief operating officer of MANDIANT. "Good Harbor Consulting’s experience in helping organizations manage the risk and complexity that exist in today’s threat landscape is first rate. We are excited about the opportunity to work together."

About MANDIANT

MANDIANT is the leader in advanced threat detection and response solutions. Headquartered in Alexandria, Va., with offices in New York, Los Angeles, San Francisco and Reston, Va., MANDIANT provides products, professional services and education to Fortune 500 companies, financial institutions, government agencies, domestic and foreign police departments and the world’s leading law firms. The authors of 11 books and quoted frequently by leading media organizations, MANDIANT security consultants and engineers hold top government security clearances and certifications and advanced degrees from some of the most prestigious computer science universities. To learn more about MANDIANT visit www.mandiant.com, read the company blog, M-Unition, follow on Twitter @mandiant or Facebook at www.facebook.com/mandiantcorp.

About Good Harbor Consulting

Good Harbor Consulting provides global strategic risk management services to a wide variety of corporate and government clients. Good Harbor’s cyber risk practice develops strategic cybersecurity programs that mitigate organizational risk, providing threat awareness, risk and governance assessment, crisis management, investment diligence, and regulatory/policy counsel. Founded in 2002, Good Harbor Consulting is led by Richard A. Clarke, an expert on homeland security, national security, cybersecurity, and counterterrorism. Good Harbor Consulting’s cyber risk practice is led by Jacob Olcott, an expert in cyber policy and legal issues and former senior advisor to the U.S. Senate and House of Representatives. To learn more about Good Harbor Consulting, visit http://www.goodharbor.net.

Web: http://www.mandiant.com; http://www.goodharbor.net/

Contacts:

 

FOR IMMEDIATE RELEASE:

Jacob Olcott Joins Good Harbor Consulting's Cybersecurity Team

Brings Deep Policy, Congressional, and Legal Expertise to Fast-Growing Consulting Team

Arlington, Va. - October 24, 2011 - Jacob Olcott, a leading expert in cybersecurity policy and legal issues has joined Good Harbor Consulting as a principal in its Cybersecurity practice.

Olcott has worked for years at the nexus of the private and public sectors on information technology policy, including cybersecurity, cloud computing, Internet governance, supply chain risk, research and development, and smart grid. He most recently served as counsel to Senator John D. Rockefeller, IV, Chairman of the Senate Committee on Commerce, Science, and Transportation, where he acted as the Chairman's lead negotiator on comprehensive cybersecurity legislation. He also led a review of corporate disclosure practices that contributed to the issuance of groundbreaking cybersecurity guidance by the SEC in October 2011. Before advising Chairman Rockefeller, Olcott was staff director and counsel for the Subcommittee on Emerging Threats, Cybersecurity, Science, and Technology of the House of Representatives Homeland Security Committee, where he developed and executed the legislative and oversight agenda in cyber, nuclear, and biological security.

Working with Good Harbor Chairman Richard Clarke, Olcott will lead the firm's work in support of private and public sector clients seeking to navigate complex cybersecurity policy and legal decisions and to assess and manage their cybersecurity risks to achieve effective, efficient enterprise resiliency. Olcott's experience as a trusted advisor and liaison to senior members of Congress and senior corporate executives provides him with a unique, holistic perspective and the ability to help clients achieve collaborative, effective cybersecurity risk management.

Olcott is a frequent conference speaker on cybersecurity issues and has authored multiple Congressional documents on cybersecurity issues. He is the recipient of multiple awards, including the Federal 100 Award for leaders in federal government information technology (2011), the SANS Institute National SCADA Security Leadership Award (2009), and the SANS Institute National Cybersecurity Policy Award (2007). Olcott holds a juris doctor from the University of Virginia and received his bachelor of arts from the University of Texas at Austin.

"We are extremely excited to have Jake join our team," said Clarke. "Jake's experience at the forefront of cybersecurity policy in the Senate and House will contribute immeasurably to helping our private and public sector clients navigate the ever-evolving and complex cyber threat and risk environment."

About Good Harbor Consulting

Good Harbor, founded in 2002, provides strategic advice to help clients understand their operating environment and manage their safety and security risks through services including emergency management, critical infrastructure protection, transportation security, urban safety and security planning, cybersecurity, counter-terrorism, and security investment.

Good Harbor’s cybersecurity consulting team works with senior leaders at corporate and government organizations to navigate cybersecurity policy decisions and to develop strategic security programs that ensure resilience of critical systems in the face of advanced cyber threats. Our team of experts offers an unmatched understanding of the nexus between risk management, public policy and cybersecurity vital to defending information and control systems in a dynamic threat environment.

Web: http://www.goodharbor.net/

Media Contact: contact@goodharbor.net or contact Emilian Papadopoulos at +1 703 812 9199.

 

FOR IMMEDIATE RELEASE:

Good Harbor's Marg Verbeek Wins 2011 Emergency Management Award

Senior Consultant Wins Award for Extraordinary Contributions to Emergency Management in Canada

Arlington, Virginia (USA)- August 2011 - Marg Verbeek, a senior emergency management expert with Good Harbor Consulting, has won the prestigious 2011 Emergency Management Award, presented by the Canadian Center for Emergency Preparedness (CCEP).

The award is presented by the CCEP to recognize individuals "who have made extraordinary contributions to emergency management or business continuity in Canada" and "who have raised the bar and set standards for others to emulate." Ms. Verbeek received the award at the 2011 World Conference on Disaster Management.

Good Harbor Chairman Richard Clarke, who presented a keynote on cyber security at the conference, said, "We are extremely proud of Marg and her achievement. The award, bestowed by her colleagues in the emergency management community, is testament to her dedication to the field and her expertise. We're delighted to have her as part of our team and supporting our clients."

A principal at Good Harbor Consulting, Ms. Verbeek provides strategic advice on issues of emergency management and business continuity to the firm's clients, particularly in the Middle East. With more than two decades of experience in emergency management, Ms. Verbeek is the author of The Evolving Role of Emergency Managers (2009) and a frequent speaker at conferences around the world. At the recent World Conference on Disaster Management, she participated in an international panel with representatives from Singapore, Australia, New Zealand, the United Kingdom, and the USA discussing how countries can cooperate more effectively when the impact of a disaster transcends international boundaries, affecting trade and manufacturing.

Before joining Good Harbor, she was President of the International Association of Emergency Managers and Manager of Emergency Measures for the Regional Municipality of Waterloo, Canada. She completed her Master of Arts in Disaster and Emergency Management from Royal Roads University and her Bachelor of Applied Arts in Urban and Regional Planning from Ryerson Polytechnical University.

About Good Harbor Consulting

Good Harbor, founded in 2002, provides strategic advice to help clients understand their operating environment and manage their safety and security risks through services including emergency management, business continuity, resilience, critical infrastructure protection, transportation security, urban safety and security planning, cyber security, counter-terrorism, and security investment.

Good Harbor's Crisis and Emergency Management consulting team works with senior leaders at corporate and government organizations to build resilient communities and nations. Good Harbor employs a strategy that addresses the full lifecycle of emergency management: diagnosing existing plans, processes, and systems; designing and testing viable contingency plans, including through exercises and simulations; maximizing stakeholder engagement and effective use of technologies to create sustainable solutions; and, using best practices and lessons learned from around the world to develop strategies that promote continuous improvement. Good Harbor's experts help clients find innovative, cost-effective, and refreshingly inclusive solutions that improve the resilience and sustainability of the government or corporations' enterprise.

Web: http://www.goodharbor.net/

Media Contact: contact@goodharbor.net or contact Emilian Papadopoulos at +1 703 812 9199.

 

FOR IMMEDIATE RELEASE:

Good Harbor Consulting Taps Eric Rosenbach to Lead Cyber Security Team

Brings Unique Combination of Policy, Legal and Technical Expertise to Fast-Growing Consulting Practice

Arlington, Va. - May 10, 2011 - Good Harbor Consulting, a global strategic security, safety, and risk management consultancy, today announced that Eric Rosenbach has joined the firm to lead its growing cyber security consulting practice. Working with Good Harbor Chairman Richard Clarke, Rosenbach will shape the strategic direction of the practice and work directly with Good Harbor clients to help them understand and manage cyber security risks.

"We are thrilled to have Eric Rosenbach join our senior management team and lead our cyber security practice," said Clarke. "Eric brings a unique combination of policy, legal, and technology expertise that will strengthen our ability to help clients effectively manage cyber security risks in today's complex operating environment. His contribution will be invaluable as we continue to grow our cyber security business and provide unparalleled consulting services to our clients in the United States and overseas."

Rosenbach has extensive experience working on cyber security policy and legal issues. He most recently focused on cyber security while leading the national security work as Managing Director at the Markle Foundation. Rosenbach previously worked as the Executive Director of the Belfer Center for International Affairs at the Harvard Kennedy School, where he managed the Center's operations, taught classes on national security policy and co-directed a multi-million dollar joint Harvard/Massachusetts Institute of Technology project on cyber security policy. Prior to his work at Harvard, Rosenbach served as national security advisor for Senator Chuck Hagel and as a professional staff member on the Senate Select Committee on Intelligence.

Rosenbach's experience in the private sector and military provides him with a strong understanding of the technical and operational aspects of cyber security. As the Chief Security Officer at World Online International, Rosenbach created and implemented the first-ever cyber risk management strategy for the largest European Internet Service Provider at the time. He subsequently advised private and public sector clients on cyber security and critical infrastructure issues for several years as a consultant with Booz Allen Hamilton. Rosenbach gained his initial understanding of cyber security as an Army intelligence officer in Europe, where as a captain he was awarded the Meritorious Service Medal for his leadership of a communications intelligence unit.

Rosenbach has authored several books on national security issues and continues to teach courses on national security policy at Harvard. He was a Fulbright Scholar. He holds a juris doctor from Georgetown, masters of public policy from the Harvard Kennedy School and bachelor of arts from Davidson College.

About Good Harbor Consulting

Good Harbor, founded in 2002, provides strategic advice to help clients understand their operating environment and manage their safety and security risks through services including emergency management, critical infrastructure protection, transportation security, urban safety and security planning, cyber security, counter-terrorism, and security investment.

Good Harbor's cyber security consulting team works with senior leaders at corporate and government organizations to develop strategic security programs that ensure resilience of critical systems in the face of advanced cyber threats. Our team of experts offers an unmatched understanding of the nexus between risk management, public policy and cyber security vital to defending information and control systems in a dynamic threat environment.

Web: http://www.goodharbor.net/

Media Contact: contact@goodharbor.net or contact Emilian Papadopoulos at +1 703 812 9199.

 

 

If you are a reporter seeking an interview or opinion piece from one of our consultants, please contact us. If you'd like to find out more about our thought leadership activities, published books or ongoing television appearances, please contact us at contact at goodharbor.net.