Driving Security Awareness with Social Media
Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward
Nielsen Online reported that by the end of 2008 social networking had overtaken email in terms of worldwide reach. Sites such as Facebook, Twitter, Myspace and Linkedin provide users with a way to build and interact with a community in real time on a familiar platform at a very low cost.
A CISO’s Guide to Security Outsourcing
Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward
While the responsibility for information security’s daily care and feeding can be outsourced, the accountability for compliance, information protection, and assurance will still reside within the organization usually in the CISO’s office.
Is the CISO-as-a-Consultant Model Obsolete?
Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward
Compounding the problem for the consultant CISO in the shorter term is that budgets are under downward pressure while the risk of fraud, insider theft and 3rd party exposure is going up. Longer term the financial crisis has forced firms to re-focus on systemic risk resulting in a revival of top-down Enterprise Risk Management efforts.
ISR News: Hackers Hold Data for Ransom
Excerpts From WashingtonPost.com
This is the second major extortion attack related to the theft of health care data in the past year. In October 2008, Express Scripts, one of the nation’s largest processors of pharmacy prescriptions, disclosed that extortionists were threatening to disclose personal and medical information on millions of Americans if the company failed to meet payment demands. Express Scripts is currently offering a $1 million reward for information leading to the arrest and conviction of the individual(s) responsible for trying to extort money from the company.
ISR News: Economy Worries FED CISOs
Excerpts From PCWorld.com
Asked about the biggest threats, 48 percent of federal CISOs identified outsider threats as their main concern, apparently contrasting with some cybersecurity companies that say insider threats are the biggest problem of many companies. Just 26 percent of government CISOs identified insider threats as their biggest threat, and another 26 percent said vulnerable software was the biggest problem.
