Evaluating Corporate Social Media Strategies

November 10, 2009 by ADMIN · 2 Comments

Daniel Wallace, Information Security Consultant at Grow Forward

The notion that social media sites are little more than a trendy consumer oriented technology is misguided. Most business activities have legal ramifications and social media is no exception., and legal issues can arise when an organization does not adequately address social media with company policy.

Driving Security Awareness with Social Media

July 20, 2009 by ADMIN · Leave a Comment

Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward

Nielsen Online reported that by the end of 2008 social networking had overtaken email in terms of worldwide reach. Sites such as Facebook, Twitter, Myspace and Linkedin provide users with a way to build and interact with a community in real time on a familiar platform at a very low cost.

A CISO’s Guide to Security Outsourcing

July 13, 2009 by ADMIN · 3 Comments

Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward

While the responsibility for information security’s daily care and feeding can be outsourced, the accountability for compliance, information protection, and assurance will still reside within the organization usually in the CISO’s office.

Is the CISO-as-a-Consultant Model Obsolete?

July 6, 2009 by ADMIN · Leave a Comment

Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward

Compounding the problem for the consultant CISO in the shorter term is that budgets are under downward pressure while the risk of fraud, insider theft and 3rd party exposure is going up. Longer term the financial crisis has forced firms to re-focus on systemic risk resulting in a revival of top-down Enterprise Risk Management efforts.

Making PCI Stand For Coordination & Impact

June 29, 2009 by ADMIN · 1 Comment

Daniel Wallace, Information Security Consultant

It will be no small task in terms of cost and effort for many of the impacted companies to make the transition from self-assessment to onsite 3rd party assessment. However, there are ways to lessen the burden and actually drive business-value from the engagement.