ITIL Certified Products are No Magic Bullet
By Michael Lohr, Sales Engineering Team Manager for Tripwire
Companies buy these so called certified products thinking they have the magic bullet to solve their ITIL project, and they’ll skip the hard part, which is designing the processes for their organization. So instead of a magic bullet they’ll just shoot themselves in the foot with a real bullet.
Driving Security Awareness with Social Media
Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward
Nielsen Online reported that by the end of 2008 social networking had overtaken email in terms of worldwide reach. Sites such as Facebook, Twitter, Myspace and Linkedin provide users with a way to build and interact with a community in real time on a familiar platform at a very low cost.
Who’s to Blame When PCI Security Fails?
By Ed Rarick, PCI Evangelist at Tripwire
Auditors definitely need to be more exacting and tougher when evaluating a company’s adherence to the specification. But an audit is a point-in-time event that says “as of today” your security level and change and control processes are at an acceptable state.
A CISO’s Guide to Security Outsourcing
Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward
While the responsibility for information security’s daily care and feeding can be outsourced, the accountability for compliance, information protection, and assurance will still reside within the organization usually in the CISO’s office.
Is the CISO-as-a-Consultant Model Obsolete?
Daniel Wallace, CISSP, PMP, Information Security Consultant at Grow Forward
Compounding the problem for the consultant CISO in the shorter term is that budgets are under downward pressure while the risk of fraud, insider theft and 3rd party exposure is going up. Longer term the financial crisis has forced firms to re-focus on systemic risk resulting in a revival of top-down Enterprise Risk Management efforts.
