Infosecurity Opinions
Comment: Audit what’s Going on in your IT Infrastructure…It’s Not Rocket Science
Aidan Simister of NetWrix looks at what organizations need to audit, but too often don’t
Information Security Certifications: Is the CISSP Just a Badge, or Is it More?
John Colley defends the merits of the CISSP exam and warns that it's not as easy as some think
Information Security Certifications: Badges of Dishonor
Gregor Campbell questions whether those who earn their CISSP are truly capable information security professionals, just by virtue of having passed an examination
Comment: DIY IT Security – The Hard and Wrong Ways
Do-it-yourself security is typically a bad idea. Matt Harrigan of Critical Assets explains why
Comment: Why Justin Bieber Is the Only Hope Left for Information Security
Dominique Karg from AlienVault gives his opinion on how Justin Bieber can help raise IT security awareness and influence people via his millions of ‘teenie’ followers
Comment: Cybersecurity Is an Issue – Now What?
Recent cyber attacks have proven that hackers and terrorists are trolling for ways to disrupt national infrastructure. We all recognize the problem, yet no one can agree on a solution. Benga Erinle says time is running short for the US government to decide what role it will play to protect critical infrastructure
Comment: Ensure You Can Trust Your Cloud Provider
Can an organization trust an IT service provided through the cloud? ISACA’s Mike Small says the answer can be found in the old Russian maxim, often quoted by US President Ronald Reagan: “trust but verify”
Comment: Mobile Devices Get Means for Tamper-evident Forensic Auditing
Providing early evidence of tampering can shorten investigation times for breaches and audits, says Michelle Drolet of Towerwall
Comment: Is Your Office Printer Secure?
The once ‘humble’ office printer has developed into a networked communication hub with an inherent security risk if not managed correctly. Quentyn Taylor of Canon Europe discusses the importance of a comprehensive, overall security policy to minimize print security risks
Comment: Securing Data from the Threat of SQL Injection
As the value of an organization’s data continues to grow, Slavik Markovich at McAfee discusses what they can do to protect their IT systems and the information they hold
Comment: Mobile Device Security – What’s Coming Next?
James Lyne from Sophos believes that the mobile device revolution is quite possibly the most significant change in computing since the shift from the mainframe more than 20 years ago
Comment: Keeping VPNs Clean in the Era of Global Mobile Anarchy
IT managers need to avoid mobile anarchy while providing reliable, secure mobile access. It’s proving a challenge to strike the right balance without affecting performance and upsetting the workforce, observes Dell SonicWALL’s Andrew Walker-Brown
Government's Role in Information Security: Leave it to the Experts
Daniel R Walsh says those already tasked with protecting our information society are in the best position to create and implement any standards
Government's Role in Information Security: Involvement = Global Priority
Hord Tipton believes government has a significant role in developing and enforcing information security standards
Comment: File Sharing Opens the Box of Information Security
Sharing may be part of internet culture, but it does not sit well with data governance. David Reed of the Data Governance Forum argues that business executives need to be reminded of the rules
Comment: May the (En)Force(ment) Be With You – Security Lessons from Star Wars
From applying security policies to DLP and effective user authentication, there are many infosecurity lessons to be learned from the classic space opera. Terry Greer-King of Check Point shows how companies can avoid the Empire’s mistakes
Comment: Tackling the Geolocation Cookie Imperative
ISACA’s Ramsés Gallego discusses the new EU cookie legislation and the effect it will have on companies that provide location-based services
Comment: Public Sector Security – Time to Step into the Breach
Adam Evans of NetIQ looks at how public sector organizations can make sure that private data remains private
Comment: Enterprise Log Managers – An Unsexy, But Vital Tool
Representatives from ISACA and CA Technologies look at why enterprise log managers are an essential element of IT security that can also provide value through non-IT security use cases
Comment: There’s Much to Learn from Recent Data Security Breaches
SafeNet’s Jason Hart looks at what the security industry has learned from last year’s data breaches and reiterates the importance of encrypting all data to ensure comprehensive protection against the latest security threats
