Infosecurity Opinions

Comment: Contactless Payments – Retailers Must Learn to be More Secure in 2013
Calum MacLeod of Venafi takes a closer look at near-field communications, which many retailers are planning to implement this year, and finds some potential pitfalls in their plans for contactless payments

Comment: Give Security a Voice in the Boardroom
Most organizations depend on IT, making them mortally vulnerable if security is breached. Phil Bindley of The Bunker believes that business consulting skills are the key to giving security a voice in the boardroom

Comment: Audit what’s Going on in your IT Infrastructure…It’s Not Rocket Science
Aidan Simister of NetWrix looks at what organizations need to audit, but too often don’t

Information Security Certifications: Is the CISSP Just a Badge, or Is it More?
John Colley defends the merits of the CISSP exam and warns that it's not as easy as some think

Information Security Certifications: Badges of Dishonor
Gregor Campbell questions whether those who earn their CISSP are truly capable information security professionals, just by virtue of having passed an examination

Comment: DIY IT Security – The Hard and Wrong Ways
Do-it-yourself security is typically a bad idea. Matt Harrigan of Critical Assets explains why

Comment: Why Justin Bieber Is the Only Hope Left for Information Security
Dominique Karg from AlienVault gives his opinion on how Justin Bieber can help raise IT security awareness and influence people via his millions of ‘teenie’ followers

Comment: Cybersecurity Is an Issue – Now What?
Recent cyber attacks have proven that hackers and terrorists are trolling for ways to disrupt national infrastructure. We all recognize the problem, yet no one can agree on a solution. Benga Erinle says time is running short for the US government to decide what role it will play to protect critical infrastructure

Comment: Ensure You Can Trust Your Cloud Provider
Can an organization trust an IT service provided through the cloud? ISACA’s Mike Small says the answer can be found in the old Russian maxim, often quoted by US President Ronald Reagan: “trust but verify”

Comment: Mobile Devices Get Means for Tamper-evident Forensic Auditing
Providing early evidence of tampering can shorten investigation times for breaches and audits, says Michelle Drolet of Towerwall

Comment: Is Your Office Printer Secure?
The once ‘humble’ office printer has developed into a networked communication hub with an inherent security risk if not managed correctly. Quentyn Taylor of Canon Europe discusses the importance of a comprehensive, overall security policy to minimize print security risks

Comment: Securing Data from the Threat of SQL Injection
As the value of an organization’s data continues to grow, Slavik Markovich at McAfee discusses what they can do to protect their IT systems and the information they hold

Comment: Mobile Device Security – What’s Coming Next?
James Lyne from Sophos believes that the mobile device revolution is quite possibly the most significant change in computing since the shift from the mainframe more than 20 years ago

Comment: Keeping VPNs Clean in the Era of Global Mobile Anarchy
IT managers need to avoid mobile anarchy while providing reliable, secure mobile access. It’s proving a challenge to strike the right balance without affecting performance and upsetting the workforce, observes Dell SonicWALL’s Andrew Walker-Brown

Government's Role in Information Security: Involvement = Global Priority
Hord Tipton believes government has a significant role in developing and enforcing information security standards

Government's Role in Information Security: Leave it to the Experts
Daniel R Walsh says those already tasked with protecting our information society are in the best position to create and implement any standards

Comment: File Sharing Opens the Box of Information Security
Sharing may be part of internet culture, but it does not sit well with data governance. David Reed of the Data Governance Forum argues that business executives need to be reminded of the rules

Comment: May the (En)Force(ment) Be With You – Security Lessons from Star Wars
From applying security policies to DLP and effective user authentication, there are many infosecurity lessons to be learned from the classic space opera. Terry Greer-King of Check Point shows how companies can avoid the Empire’s mistakes

Comment: Tackling the Geolocation Cookie Imperative
ISACA’s Ramsés Gallego discusses the new EU cookie legislation and the effect it will have on companies that provide location-based services

Comment: Public Sector Security – Time to Step into the Breach
Adam Evans of NetIQ looks at how public sector organizations can make sure that private data remains private



