A month or so ago, I asked people to post questions that I would try and get answered at EMC World. Every question had to do with security. Unfortunately, I was unable to track down all the right people to ask the right questions in a timely fashion. Part of this was my fault as I didn’t keep on top of the questions that I had promised to get answered. There was one situation where I was told by person X that I needed to talk to person Y. The irony was that I had spend half an hour the previous night socializing with person Y, never realizing that I should ask that question and I never saw person Y again.

So if I don’t answer your question, I didn’t ask it and I am sorry. If it is any consolation, I didn’t get all of my questions answered either. So to Robin, no idea about the future of Common Criteria certification. James, I neglected to ask about about Ounce Labs and static code testing as a whole (whenever I remembered the question, I was invariably talking to a marketing person and not one of the product managers).

I would like to thank all the product managers for patiently letting me ask my questions repeatedly until we were sure that we were talking about the same thing. I also want to thank Craig Randall for all the time that he spent with me during the conference, and later via email. He was very helpful and worked with me to more fully understand my business scenarios. He successfully directed me to the correct product managers to give the scenarios to directly. Now I am bothering them, leaving Craig to talk about more relaxing topics (at least until my next hard question).

Continue reading →