SECURITY MAVEN Bruce Schneier has joined Co3 Systems just weeks after leaving BT.
Schneier's exodus led to some discussion and it remains unclear whether he left or was pushed. The security industry consensus seems to favour the latter, but we'll likely never know.
"We can confirm that Bruce Schneier, BT's security futurologist, is leaving BT at the end of December 2013," was the line from his ex-employer.
The other, more interesting telling, is that BT wanted its chief security expert out because of comments he made about security, specifically regarding illegal internet surveillance conducted by the US National Security Agency (NSA) and the UK Government Communications Head Quarters (GCHQ).
Schneier once said that too much security is not a good thing, explaining that people like to have what he described as "wriggle room".
Today in a blog post, Schneier revealed the name of his new employer, saying that it is just the sort of company that he always fancied working for and one that he has worked with before.
"For decades, I've said that good security is a combination of protection, detection, and response. In 1999, when I formed Counterpane Internet Security, I focused the company on what was then the nascent area of detection," he said.
"Today I am joining Co3 Systems as Chief Technology Officer. I've been on the company's advisory board for about a year, and was an informal adviser to CEO John Bruce before that. John and I worked together at Counterpane in the early 2000s, and we both think this is a natural extension to what we tried to build there."
Co3 gives users a way to respond adequately and effectively to security incidents, and Schneier called it a "social networking site for incident response".
The idea is that the system generates your incident response plan on installation, and when something happens, automatically executes it. It collects information about the incident, assigns and tracks tasks, and logs everything you do," he said.
"It links you with information you might need, companies you might want to talk to, and regulations you might be required to comply with. And it logs everything, so you can demonstrate that you followed your response plan and thus the law -- or see how and where you fell short." µ