Saw an interesting article right in the Chicago Tribune’s Sunday Magazine section about information security – Cybercrime is on the rise. I love that cyber security is not only making the news, but it’s right in front of you when you’re settling in with your coffee and Sunday newspaper (for those of us who still […]
I’ve written about this before, but I think it bears repeating now and then. Security awareness of an organization’s employees is as important as ever and is often the weakest link in an organization’s information security posture.
An interesting benchmark study was done recently (published Jan., 2011) by Ponemon Institute, commissioned by Tripwire, Inc., entitled “The True Cost of Compliance”, examines 46 companies, and involved interviews of 160 functional leaders.
As we welcome in the New Year, it’s common for people to make a few New Year’s Resolutions. Let’s make a few New Year’s Information Security Resolutions! This year I challenge you to resolve to do the following:
Let’s talk about information security policy frameworks!! Hmm, did the room just clear?
Do you ever log into an application and it asks you to change your password for what feels like the 5th time this month – what is your password management?
Data Classification – Determining what constitutes “sensitive data” is usually not a difficult thing for most people. For me personally, it would be my social security #, my account information – banking, credit card information. And, sadly as the years go by, my birthdate is getting to be more sensitive…
I recently wrote about Security Awareness Training, and mentioned that a well-trained staff and general employee population can be a good deterrent against Social Engineering practitioners. Social Engineering is a service offering of Halock Security Labs, and it’s probably one of our team’s favorite exercises. Social engineering is basically a test of the security awareness […]
Cyber Security Awareness Training – There is plenty of technology that can be applied in all manner of ways to help protect against a breach, but if the employee culture doesn’t embrace being mindful of security, it makes the CISO’s job a little harder.