The Truth About Regulatory Compliance

October 19, 2009 by ADMIN · Leave a Comment

By Steven Fox, Founder of SecureLexicon

Given the business impact of regulations like PCI DSS, Sarbanes Oxley, and GLBA, this is understandable. While savvy business leaders understand the limitations of these guidelines, there are among us less enlightened individuals who view these as a cure for organizational security issues.

Black Hat: Articulating the Value of Security

October 12, 2009 by ADMIN · Leave a Comment

By Steven Fox, Founder of SecureLexicon

How do we market security? The cyber-bullies among us might still use Fear, Uncertainty, and Doubt. While this may produce short term acquiescence, that approach ultimately alienates us from the decision makers. Ultimately, security professionals must identify what is valuable to the business and then associate the need for security with those assets

Anti-Malware Strategy Crucial for Businesses

September 8, 2009 by ADMIN · Leave a Comment

By Steven Fox, Founder of SecureLexicon

This is the first part of my Black Hat interview with Andrew D. Hayter, Anti-Malcode Program Manager for ICSA Labs. In this installment, Mr. Hayter highlights the challenges businesses face in mitigating malware-related risks.

Black Hat: Risk and Application Security

August 17, 2009 by ADMIN · Leave a Comment

By Steven Fox, Founder of SecureLexicon

The majority of IT security spending is focused on perimeter security. These measures are reactive in nature. “With the advent of Web Services and SOA, the attack surface is more exposed and is getting more complex. The more complex a system is, the easier it is to compromise. Security should be considered early in the software development process.