News
Commentary
News
Quick Hits
News
CommentaryNewsNews
Commentary
NewsNewsNews
CommentaryNewsQuick HitsNews
Commentary
Of course it should take time to find and hire the right person and you should also expect to have competition for good people. I think the so called "lack of numbers" is due to companies looking for people who have experience...
In reply to: Re: But who would be intreated?
I'm not sure anyone's questioning the level of skill of existing InfoSec professionals (though I could point to a few who need some upping in that regard) - the bigger problem by far is a lack of numbers of skilled professionals....
In reply to: Re: But who would be intreated?
This is a great question and it's something Amit discusses a bit in his Low Hanging Fruits: The Top Five Easiest Ways to Hack or Get Hacked whitepaper (link in blog). In my personal experience, SMB's tend to have almost...
In reply to: Re: Vulnerability Standpoint
Personally, I'm still a little confused as to why everyone seems to think there's an issue the skill level of information security professionals. I remember talking about this back in January (maybe), sure everyone can use...
In reply to: Re: But who would be intreated?
I am honestly not surprised that Anthem would refuse after the OIG said that they were failing the last time. But what really made me question things was where they said "it would cause network outages and we would need...
In reply to: Surprised...yet not.
The federal bureaucracy is maddening! I need to get this straight in my head. From what I understand, HIPAA enforcement and compliance reviews fall under the US Department of Health & Human Services Office for Civil Rights....
In reply to: Anthem's Refusal
I don't know if there are any movie studios that would be at all interested in improving the uptake of InfoSec staff. Sure, you might say SONY, but they've repeatedly demonstrated a desire to cut security despite pa...
In reply to: But who would be intreated?
But that´s exactly my point, it is NOT easy. It´s hard work. That´s why almost nobody does it.
In reply to: Re: Weak link
There could be two reason why we do not hear about data breaches in Europe - (a) they do not exist (b) European companies are not disclosing them.
I am inclined to think that the latter is true.
In reply to: Re: I don't get the US Banks' mentality
They've been around for years and years.
Besides, were is 'the building code' ??? I thought there will be at least a passing reference to the actual standard or best practices.
Very disappointing.
In reply to: How come connected medical devices are 'fast emerging'?
The article brings up important details about the basics of information security. Unpatched Microsoft Office was necessary for this ploy to work. The attack highlights the importance of applying all security...
In reply to: Re: Security culture
Scan everything. :)
In reply to: Re: Infected conference materials
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Tweet This
