ISR News: Communicating Security’s Value
Excerpts From CIO.com
The biggest challenge security teams face in their organization is one of perception, according to Michael Santarcangelo, founder of Security Catalyst, a New York-based consultancy focused on changing the way people protect information. “They lack relevant context,” said Santarcangelo. “So security people get wrapped up in thinking: ‘The CFO wants an ROI. We better work on ROI.’ But what the CFO is really saying is:’ I don’t understand what you do. So you have to justify it to me.’
ISR News: Cyber-Crime Advice for Obama
From Sysman.com
Critical government, military, and civilian networks have been repeatedly infiltrated to steal our intellectual property and national secrets. So, how do we build a modern, national cyber security policy as we enter into the 44th Presidency? The Center for Strategic and International Studies’ report weighed in on this topic, but I think they missed the point in their technical recommendations,” Aziz said in a blog post.
ISR News: World’s Biggest Data Breach
Excerpts From Forbes.com’s Taylor Buley
Talk about a credit crisis: Heartland Payment Systems, a credit card payment processing firm, may have been the victim of the largest data breach to date. The Princeton, N.J.-based firm said Tuesday that it discovered malicious software in its systems that compromised the security of the data traversing its network. It’s unclear what data may have been tampered with or stolen, but Heartland said no merchant data, cardholder Social Security numbers, unencrypted PIN numbers, addresses or telephone numbers “were involved in the breach.”
ISR News: Obama’s Cyber-Security Push
Excerpts from WSJ.com’s Ben Worthen
While the outgoing Bush administration took steps over the last two years to improve cyber security, “we don’t think it’s keeping pace with the progress necessary to keep the country safe,” says John Stewart, chief security officer for Cisco Systems.
ISR News: UK Ministry of Defense Attacked
Excerpts from CIO.com’s Jeremy Kirk
The U.K. Ministry of Defence is in the midst of an electronic fight with a computer virus that rapidly spread through its computer networks starting Jan. 6. The virus infected computers throughout the military, including those used by the Royal Air Force and Royal Navy, and is one of the most severe attacks the organization has ever faced, according to a Ministry of Defence spokeswoman.
ISR News: 35M Records Breached in 2008
Excerpt from CIO.com’s Jeremy Kirk
It documents 656 breaches in 2008 from a range of well-known U.S. companies and government entities, compared to 446 breaches in 2007, a 47 percent increase. Information about the breaches was collected by tracking media reports and the disclosures companies are required to make by law.
ISR News: SSI Numbers Breached
Excerpt from the Louisville News BizJournal
RBS WorldPay, a subsidiary of Citizens Financial Group Inc. said law enforcement agencies are investigating a Nov. 10 breach of the company’s cyber security. The breach affected the personal information of 1.5 million cardholders. Up to 1.1 million Social Security numbers could have been accessed, according to the company.
ISR News: 16,000 Katrina Records Posted
Excerpt from The Times-Picayune’s Gwen Filosa
FEMA has confirmed that an “unauthorized breach of private information” resulted in the information release of 16,857 names, Social Security and phone numbers, and other private details of people who had applied for benefits. The information was flashed on a pair of privately run Web sites, but for how long was unclear.
ISR News: “Paring Down” Security
Excerpt from CIO.com’s Jaikumar Vijayan
“The intensive projects that require a lot of capital outlay and work on the integration side are probably going to be throttled back,” Hochmuth said. He also expects companies to look more closely at integrating their security, networking and operations teams and reducing their staffing levels.
ISR News: Employee Arrested for ID Theft
Excerpt by the LA Time’s Alexandra Zavis
Hospitals’ increasing reliance on computerized record-keeping has provided new avenues for identity theft and invasions of medical privacy. As recently as May, a Glendale man was convicted of using the names of hundreds of Los Angeles County and city employees to submit fraudulent claims for diagnostic services amounting to more than a quarter-million dollars.
