Archive for April, 2009
Red Flag Expert Interview
Posted by: | CommentsI am preparing to interview two Red Flag Rule experts about how companies comply to this new FTC mandate that goes into effect in May ‘09.
If you have any specific questions you would like me to ask, please click here to submit your questions.
Passwords Don’t Have To Threaten Business Security
Posted by: | CommentsThe emergence of the World Wide Web as a global, around the clock marketplace has opened a multitude of new opportunities to businesses which have never before been seen. Computers and global communication networks have brought vendors, customers and markets together in new and beneficial ways. Along with all of the benefits which business has gained from the information age come some downsides. New crimes have not been created by new technology, but rather new technology has given new tools to criminals to commit the same crimes as they always have. The difference is that criminals now have a global reach, just as businesses do. In the U.S. at least, the responsibility for protecting consumers from having their personal information pilfered is placed upon businesses.
Cutting Information Security in Hard Times is Dangerous
Posted by: | CommentsAlthough some analysts actually expect security spending to rise this year — at least as a percentage of total IT spending — some CIOs are giving serious thought to the once-unthinkable idea of trimming security budgets as businesses look to cut costs during this global recession. Before you start trimming here are five points to consider.
The risk of cutting security is that a security breach can be disastrous. The Ponemon Institute pegs the average cost of a data breach at $6.7 million.
When implementing a security solution, here are five areas to consider before investing:
Shameless Pitch for Password Security
Posted by: | CommentsI am posting our video pitch for Power LogOn. While you might think I am only self promoting I actually what viewers to understand why password management is so important, and what better person to make the case they a pretty woman.
Employees Cause Data Security Breaches – Not Malware
Posted by: | CommentsWhen business owners look around their office and see how sensitive documents are handled it is no wonder that the weakest security link is the employee. But it is not always the employee’s fault since they have never been trained or given the security tools to protect data.
A Symantec report says that most breaches at small to midsize businesses are caused by people, not malware. Click here to read the entire article.
Look at all the four vulnerability point: Building – Employee – PC – Network and start implementing training, policies and solutions that are inexpensive and work.
PIN Crackers
Posted by: | CommentsWe all know what a PIN is (Personal Identification Number). When one uses only a PIN to authenticate a user it is refered to as single-factor authentication (something you know) which is the weakest of all authentications for network security. Today’s security standards now require at least tw0-factors (something you have and something you know). The best is security to protect against identity theft is a PIN protected, smartcard-based, password manager which offers double-two factor authentication.
Reader what Kim Zetter of Wired Magazine writes on how hackers have crossed into new frontiers by devising sophisticated ways to steal large amounts of personal identification numbers, or PINs, protecting credit and debit cards. Click here to read the entire Wired article.
Cyber Attacks on the Grid
Posted by: | CommentsHere is a recent article on the threat of cyberspies and cyberterrorism. While the news like to publish these big articles, smaller businesses are just as much at risk. While anti-virus programs are needed, some attackers are breaking in due to weak passwords and poor password management by employees. That is why the government in many security directives is strongly suggesting two-factor authentication. Look into adding a smartcard based password manager as another tool to protect your networks.
Security Talk #7 – Don’t use SSN for ID
Posted by: | CommentsIn the past schools and businesses like to use a person’s social security number as an identification or account number. Listen to why this practice can be very costly to your business.
