Security
Advice & Opinion articles
Mobile Security Isn't Going to Just Happen
Tue, May 24, 2011 - Security professionals need to get hands-on with the software that runs on mobile devices and engage with the developers who put all those apps in users' hands.
Security Not Strategic? Sure, Just Like IT
Fri, May 13, 2011 - Here's a nice little bedtime story, taken from the corporate history books.
The 3 Types of Insider Threat
Thu, May 12, 2011 - Why does your competitor have your latest research or financial figures? It must be an insider -- or is it?
Building Out Your Strategic Security Metric Framework
Thu, May 12, 2011 - For years now, security professionals have been in agreement that a security metrics program is an increasingly important tool to manage the security posture in an environment. We like to cite too-true cliches like "you can't manage what you don't measure" and sing "Kumbaya" together about the virtue and benefits of programs. And yet there really aren't many success stories out there.
IPhone Location-Tracking Incident Boosts Stock of 'Privacy By Design'
Mon, May 09, 2011 - With a Senate hearing scheduled for tomorrow, the concept of privacy by design could get more attention.
Webmail Gets Hacked, Corporate Passwords Exposed
Mon, May 09, 2011 - This week, one of our C-level executives suffered a personal security incident that spilled over to the workplace. Here's what happened.
It's Not Funny When Security Becomes a Joke
Mon, April 04, 2011 - Security is now so mainstream, it can be the punchline for a network comedy.
Security Manager's Journal: Helping in-House Developers
Mon, March 28, 2011 - This week I found out that my company is developing software in-house. Until now I hadn't known that we were a software development shop, but I guess I shouldn't be surprised. Most companies that I've been with have developed their own software for one purpose or another. I only learned about this software development project when one of the programmers approached me to ask about the best way to store usernames and passwords in the application's database. Yes, that's right -- they built the authentication right inside the application, instead of calling out to an external authentication source.
A Metrics System for the CIO
Mon, March 21, 2011 - Metrics can have a very interesting effect. You just have to present them properly.
Ken Van Wyk: is Apple Getting Serious About Security?
Mon, March 07, 2011 - There have been a couple of glimmers of hope lately, but company has a long way to go.



