Infosecurity Opinions
Perimeter Security: In Memoriam
Paul Simmonds submits his obituary for perimeter-based security strategies
Perimeter Security: Evolved, Not Dead
Perimeter security strategies must adapt to today’s realities, but the concept itself is not entirely obsolete, says Scott Gordon
Comment: Avoid the Seven Deadly Sins of Cloud Computing
The benefits of cloud computing services are now well established; however, uncertainty still surrounds several of the inherent risks. The ISF’s Steve Durbin examines what organizations can do to realize the benefits of the cloud, while avoiding the information security bear-traps that exist
Comment: Overcoming a Year of Vulnerability
Mark Dunleavy of Informatica takes a look back at 2012, and explores why it’s being described as a year of vulnerability. We have seen data breaches galore over the past 12 months, so he offers guidance in how to make 2013 the year of data breach prevention
Comment: Contactless Payments – Retailers Must Learn to be More Secure in 2013
Calum MacLeod of Venafi takes a closer look at near-field communications, which many retailers are planning to implement this year, and finds some potential pitfalls in their plans for contactless payments
Comment: Give Security a Voice in the Boardroom
Most organizations depend on IT, making them mortally vulnerable if security is breached. Phil Bindley of The Bunker believes that business consulting skills are the key to giving security a voice in the boardroom
Comment: Audit what’s Going on in your IT Infrastructure…It’s Not Rocket Science
Aidan Simister of NetWrix looks at what organizations need to audit, but too often don’t
Information Security Certifications: Is the CISSP Just a Badge, or Is it More?
John Colley defends the merits of the CISSP exam and warns that it's not as easy as some think
Information Security Certifications: Badges of Dishonor
Gregor Campbell questions whether those who earn their CISSP are truly capable information security professionals, just by virtue of having passed an examination
Comment: DIY IT Security – The Hard and Wrong Ways
Do-it-yourself security is typically a bad idea. Matt Harrigan of Critical Assets explains why
Comment: Why Justin Bieber Is the Only Hope Left for Information Security
Dominique Karg from AlienVault gives his opinion on how Justin Bieber can help raise IT security awareness and influence people via his millions of ‘teenie’ followers
Comment: Cybersecurity Is an Issue – Now What?
Recent cyber attacks have proven that hackers and terrorists are trolling for ways to disrupt national infrastructure. We all recognize the problem, yet no one can agree on a solution. Benga Erinle says time is running short for the US government to decide what role it will play to protect critical infrastructure
Comment: Ensure You Can Trust Your Cloud Provider
Can an organization trust an IT service provided through the cloud? ISACA’s Mike Small says the answer can be found in the old Russian maxim, often quoted by US President Ronald Reagan: “trust but verify”
Comment: Mobile Devices Get Means for Tamper-evident Forensic Auditing
Providing early evidence of tampering can shorten investigation times for breaches and audits, says Michelle Drolet of Towerwall
Comment: Is Your Office Printer Secure?
The once ‘humble’ office printer has developed into a networked communication hub with an inherent security risk if not managed correctly. Quentyn Taylor of Canon Europe discusses the importance of a comprehensive, overall security policy to minimize print security risks
Comment: Securing Data from the Threat of SQL Injection
As the value of an organization’s data continues to grow, Slavik Markovich at McAfee discusses what they can do to protect their IT systems and the information they hold
Comment: Mobile Device Security – What’s Coming Next?
James Lyne from Sophos believes that the mobile device revolution is quite possibly the most significant change in computing since the shift from the mainframe more than 20 years ago
Comment: Keeping VPNs Clean in the Era of Global Mobile Anarchy
IT managers need to avoid mobile anarchy while providing reliable, secure mobile access. It’s proving a challenge to strike the right balance without affecting performance and upsetting the workforce, observes Dell SonicWALL’s Andrew Walker-Brown
Government's Role in Information Security: Leave it to the Experts
Daniel R Walsh says those already tasked with protecting our information society are in the best position to create and implement any standards
Government's Role in Information Security: Involvement = Global Priority
Hord Tipton believes government has a significant role in developing and enforcing information security standards
