Infosecurity (UK) - Compliance and Policy

Latest News

Smart energy meters securely meet WiFi
It looks as though the smart energy meters that energy companies in the UK and US are committed to installing in the years ahead will be WiFi-enabled, as the ZigBee Alliance and the WiFi Alliance are linking up.
Industry prepares for new ICO penalties starting next month
The IT security industry - and its customers - are starting to prepare for the introduction of new and stiff penalties for organisations that allow data to be stolen or leak, and could reasonably be said to be aware of the risk.
ISACA leader gives thumbs up to classifying security as highest priority in data center planning
Research just published claims to show that security, price and power - in that order - are the three main drivers when it comes to companies reviewing their data center requirements.
Trusteer introduces real-time malware analysis technology
Trusteer, the internet authentication, encryption and security specialist, has taken the wraps off a real-time malware analysis and remediation technology for banks and other financial institutions.
End point security webinar scheduled for Tuesday
It's about three weeks before the new ICO penalties for serious data losses and leaks will begin, so Infosecurity is pleased to be hosting a webinar at 3pm on Tuesday titled: 'End point security – How to stay out of the headlines and avoid a £500 000 fine.'

Podcasts

The Art of the Possible ... engaging your audience for information security awareness
Infosecurity Magazine’s Eleanor Dallaway speaks to Paula Davis, global head of client services at SAI Global about the evolving tools, techniques and technologies available to businesses for addressing the human element of information security through creative, effective employee awareness training. This podcast will examine the options available to you for information security training and will: • Provide an overview of the various training media that can effectively engage employees in information security. • Give advice on how businesses can respond to the changing needs, habits and expectations of learners by using new media to raise awareness of information security • Explain how tried and trusted training methods such as e-learning can be made even better • Look at the pros and cons of using emerging technologies and new media for information security awareness • Give guidance on how to ensure your choice of media is ‘fit for purpose’ and appropriate to your audience and budget
Securing your business against future internet threats
Infosecurity’s Eleanor Dallaway speaks to Gerhard Eschelbeck, CTO of Webroot, about how to secure your business against future internet threats. This podcast will examine how the internet has influenced business practices, and will look at the current and future threat landscape. This podcast will also: • Look at hacker motivations • Consider how businesses are protecting employees remotely • Touch on the evolution of malware • Analyse the impact of social networking • Highlight and recommend at multi-layered security approach • Address the hype around cloud services
Editorial Podcast: 27 November 2009
Kari Larsen summarises the week's news
Editorial Podcast: 5 November 2009
Kari Larsen summarises the week's news

Webinars

Tackling the mobile endpoint security issue
Modern workforces are becoming more and more mobile - data just released from iPass, for example, suggests that 40% of employees now access office IT resources on the move. But whilst accountants rub their hands at the prospect of reducing office overheads, IT managers are concerned about the security of the mobile workforce and, in particular, the mobile endpoint security issue.
Understanding the IT security total cost of ownership puzzle
IT security and the financial function are starting to become happy partners, now that key performance indicators (KPIs) and total cost of ownership (TCO) figures can be created for most IT systems and software. Join us for an entertaining and informative webinar in which we'll explain how to balance the requirement of future-proofing your IT security resource, whilst at the same time balancing the time and budget issues that also come to the fore.
End point security - How to stay out of the headlines and avoid a £500,000 fine.
April 2010 sees the introduction of new data breach penalties from the Information Commissioner's Office (ICO). Criminal penalties and data breach notification mandates are also on the horizon, so it's essential that you review your organisation's mobile data security strategy.
Password Management: Top Ways to Deal with the Necessary Evil
Password management sounds like a mundane aspect of IT security, but as recent high-profile media reports have proven, it's now a central part of effective company technology management. Anecdotal evidence in the industry suggests that the technology and techniques to handle password management is a black art. Not so. Join us for an entertaining and informative webinar in which our panel of experts will explain the strategies that are required for the efficient, secure and compliant management of passwords.

Blogs

Strong Authentication and Privacy – A Contradiction in Terms?
Posted by Roger Halbheer • 17 March 2010
You know that I am not a big fan of the requirement for having all Internet users authenticate strongly. There are people in the security arena who think that this is the only way to fight cybercrime ...
tags: Privacy, Identity Management
rated:
Insider Threat of Cloud Computing
Posted by Roger Halbheer • 11 March 2010
Tonight I got this article forwarded to me: Afraid of outside cloud attacks? You're missing the real threat. David Linthicum (the author) claimed that if you are looking at the hackers attacking ...
tags: Cloud
rated:
Data Protection Heat Map
Posted by Roger Halbheer • 09 March 2010
I was looking at some research done by Forrester, which could be interesting for you as well. They try to lay out the landscape with regards to data protection for you and it looks fairly compelling. ...
tags
rated:
Why it pays to be secure – Chapter 5 – I need tools!
Posted by Roger Halbheer • 06 March 2010
Our EMEA Security Program Manager, Henk van Roest, started this series internally and with his consent I am publishing it here in my blog as I think it contains a lot of great information for you to u...
tags
rated:
Virus Alert! Twitter, Google, Hallmark and Others Subject To Attack
Posted by Patrick Walsh • 05 March 2010
The eSoft Threat Prevention Team is warning customers today of a new email scam circulating very quickly. These fraudulent emails claim to be from Google Staffing, Hallmark, Twitter as well as o...
tags: virus, bot, spam
rated:

Features

Comment: Cybercrime - Still a growth industry?
One business most likely to be booming in the next year is that of cybercrime, says Charlie Abrahams of MarkMonitor
Comment: Securing web 2.0 in the workplace
Simon Morris, research and development director at Pentura looks at how the adoption of web 2.0 makes the job of keeping email and the web free from attacks, malware and spam even more difficult. Yet, simply closing access to unapproved tools can be short sighted as unhappy employees drift to rival businesses with more enlightened policies
Spamming the socially active - spam diversifies to Twitter, IM, SMS, etc
Once poison found only in email accounts, spam is now polluting every form of electronic communication from IM to SMS and from blogs to tweets. But how well is it doing outside its natural domain? William Knight takes a look at non-email spam
Comment: USB sticks - An employees dream- IT’s worst nightmare
Ironkey's John Jefferis explores the benefits, but also the information security issues surrounding USB sticks.

Downloads

PCI: Using Microsoft Active Directory to Address Payment Card Industry (PCI) Data Security Standard Requirements in Heterogeneous Environments
Learn how to simplify compliance reporting for stringent PCI DSS regulations by linking all access rights, privileges, and audit logs to a single, definitive Active Directory identity.
Data Handling Procedures in UK Government
The Cabinet Office published the "Data Handling Procedures in UK Government", which highlights the need to restrict access to public sector data and encrypt data held on removable storage media such as CDs, USB keys and laptops.
Demystifying IT Risk to Achieve Greater Security and Compliance
Managing IT risk is part of running any business these days. Regardless of what business you’re in, understanding IT risk can help you increase network security, reduce management costs and achieve greater compliance. Corporate leaders who fail to identify, assess and mitigate IT risk are setting themselves up for serious security breaches and financial losses down the road. And those leaders who think that managing IT risk is the job solely of the IT staff may be in for a big shock.
The Essential Series - Security Information Management
Maintaining information security is a multi-faceted operation that is best managed with a single comprehensive strategy rather than mix of tactics based on whatever point solutions are already deployed. Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM.
Aberdeen: Choosing and Consuming Managed Security Services
Learn the strategies, actions, and capabilities that Best-in-Class organizations employ and technologies they choose to obtain superior performance against various security performance metrics.

Latest News

Podcasts

Webinars

Blogs

Features

Downloads

Members' Login

Not a member?