Independence Statement

We provide only independent consulting services, articles, and books (and the latter two are distributed by our publishers including the Computer Security Institute, John Wiley & Sons, Elsevier Science Publishing, and Information Shield). We own stock in none of our publishers. We do not sell, represent, or act as an agent for the products of any information security vendors. We establish no relationships with information security vendors that would lead to commissions, referral fees, stock options, or any other types of remuneration for endorsements, referrals, contacts, or mentions. We sit on no information security vendor Boards of Directors, or information security vendor sponsored advisory boards, which might cause us to side with a particular vendor. We have no outside or moonlighting jobs with information security vendors; all of our work is done for InfoSecurity Infrastructure, Inc. as part of our normal consulting and authoring services, and all of our work is subject to this ethical statement. We do not have and do not seek the status of a "preferred consulting provider" as designated by any information security vendor. We have many clients and are not financially dependent on any one of them, nor do we seek relationships with clients which would make us so dependent. We do not allow clients to influence our professional opinion by retaining our services with enhanced fees, large contracts, and the like. We do not water-down our findings and recommendations to curry favor with clients. We tell the objective truth as we see it, with the client's best long-run interests in mind, but at the same time attempting to balance the interests of all involved parties. We disclose all known potential conflicts of interest before accepting consulting or authoring projects.