Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »
Webcast: In the Google Apps Cloud: How to Achieve Your Business Objectives
Dec 3rd, '09, 1 - 2 pm US/Eastern (GMT-5)
Join Council member Brent Hoag, Director, Global IT, at JohnsonDiversey, as he discusses the adoption of Google Apps which has helped meet four corporate goals; sustainability, simplification, increased employee productivity and global collaboration.
Webcast: Collaboration Initiatives: Benchmarks & Best Practices
Dec 15th, '09, 4 - 5 pm US/Eastern (GMT-5)
Join Council members Ruth Thorpe, VP & CIO at the U.S. Pharmaceutical Operations of Sanofi-Aventis, and Gary Kuyper, CIO at Bethany Christian Services, as they speak about their collaboration initiatives and experiences in how and why they chose the social networking and collaboration tools they are using and their business goals for collaboration, and facing culture change challenges.
Data Overview: Collaboration Initiatives Field Guide: Benchmarks & Best Practices
This appendix to the Council Field Guide provides an analysis which discusses benchmarks for collaboration IT implementation costs, adoption rates and payoffs. The overview identifies top IT and business goals and satisfaction rates for collaboration initiatives as well as best practices and lessons learned for implementing collaboration IT.
Learn more about the CIO Executive Council »June 11, 2008 — IDG News Service —
Two months after their Web site was hacked, the organizers of Barack Obama's presidential campaign are looking for a network security expert to help lock down their Web site.
"Obama for America is looking for a network security expert who wants to play a key role in a historic political campaign," reads the ad, posted to the Barackobama.com Web site.
The requirements are pretty much what you'd read in any e-commerce security help-wanted ad: VPN (virtual private network) and Unix or Linux experience, along with a "deep understanding" of LAMP (Linux, Apache, MySQL and Perl) development. And of course, the successful candidate must be willing to "respond off-hours to high urgency security situations."
Successful candidates will join Obama's Boston team and should expect to find a new job come November.
Security experts said this is the first time they can remember seeing a Web security job advertised for a political campaign. In fact, Internet security has not always been a priority on political Web sites, according to Paul Ferguson, a network architect with computer security company Trend Micro. "Normally, I don't think they've paid much attention to it," he said.
Obama's Web site, built by Facebook cofounder Chris Hughes, has been the model of Web 2.0 campaigning, using social-networking techniques to raise funds and build a broad base of active, Internet-savvy supporters.
But security experts have long warned that powerful Web site features also open new avenues for attack.
With the Internet driving the majority of the campaign's contributions, Web security is probably more important to Obama than it has been to any other presidential candidate. A Web outage could cost his campaign millions of dollars, and a widely publicized privacy breach could put the brakes on his most important source of cash.
"The Obama campaign has got a bigger bull's-eye on them now that they've stitched up the nomination," Ferguson said. "It's worth their time to be more security conscious."
In April, a programming error allowed a Hillary Clinton supporter to redirect part of Obama's Web site to Clinton's, but today's Web attack techniques could lead to much more serious consequences.
"Attacks like SQL injection would be far more of a concern," said Oliver Friedrichs, a director with Symantec Security Response who has written about computer security and the 2008 presidential election. "If I was able to get access to the database that houses their donor information, that would be very concerning."
So-called SQL injection attacks take advantage of programming errors and allow attackers to get unauthorized access to parts of a Web site. They can be used to install malicious software or gain access to sensitive information.