Incident Response Readiness – Is your organization ready for a breach? Have you ever undergone a breach? Is there a breach going on right now? Or, ahem… have you undergone a breach and were not even aware that it occurred? Yikes…
An offering of ours, Incident Response Readiness, I think, is going to see a lot more attention in the coming year. Already noticing it.
When someone says “you have malware”, what do you think of? Do you remember the “old days” when a virus was simply an annoyance, blue screening Windows machines, slowing your machine speed, or popping up false firewall advertisements? Unfortunately, those “old days” are long gone. Malware has changed drastically in recent years.
We get calls for forensic analysis and investigation for a variety of reasons. Sometimes it’s a breach and the client wants to find out how bad the damage was, if anything was taken, if there’s any leave behind like malware, etc. Sometimes it’s an internal investigation on an employee for suspected theft or for breaking […]
Information security policies – Whoo hoo! Pretty exciting stuff! But seriously, if we didn’t have policies, where would we be? Civilization as we know it would cease to exist! We all have policies that we adhere to – personally, professionally, morally.
When an incident occurs, with the amount of technology involved, it’s easy for one to forget the human element. Incident Response is largely a human matter.
Saw a great WSJ article recently on steps to take if you’ve been breached. Well written! Here’s the Cliff Notes version:
A recent article on darkreading.com showed results of a survey on consumer loyalty and data breaches called SailPoint Market Pulse Survey, conducted online by Harris Interactive.
As reported by The Register (http://www.theregister.co.uk/2011/07/26/bet24_security_breach/), online gambling site BET24.com notified customers on Monday of data breach that occured in December, 2009.
I recently wrote about Security Awareness Training, and mentioned that a well-trained staff and general employee population can be a good deterrent against Social Engineering practitioners. Social Engineering is a service offering of Halock Security Labs, and it’s probably one of our team’s favorite exercises. Social engineering is basically a test of the security awareness […]