The world of malware (literally bad software) has some interesting terminology. Botnets and Zombie networks sound like they should be different, but they are basically the same thing. The imagery of masses of robots (ala I Robot) or hordes of Zombies from Night of the Living dead is surprisingly a relatively accurate description. Botnets or […]
So congratulations, you were just named Chief Information Officer of your company and now moved into your new office. Looking through the top desk drawer you find a note with three sealed envelops attached. The note says when you have your first major crisis, open envelop one, the second one open envelop two and the […]
They say a chain is only as strong as its weakest link. In the world of IT systems, you don’t want that weak link to be user authentication. Once a hacker gains access to a system as a valid (potentially high level) user, the amount of damage they can do is unlimited. There are different […]
The connected world of business today requires that people perform various tasks culminating in a desired goal while having different responsibilities. The level of complexity creates problems for anyone managing access to various systems. Roles, being a collection of permissions to be assigned to users, are being used to manage the complexity. Design of roles […]
Going through the process of developing a set of policies for your workplace is a must as you reach some point of growth within your organization. Many companies operate for years without taking the time to develop a standard set of information security policies. We have started to see an uptick in the number of […]
It seems that there is a constant barrage of regulations and standards that businesses must comply with. Every quarter there is a new audit; SOX, GLBA, HIPAA, PCI, and the list goes on. Businesses try to accommodate these requirements by adopting structured governance model which presents their own requirements, seldom aligning perfectly with the others. […]
So your organization has decided it needs to get a handle on managing the passwords for end users. A single sign on product is a great way to achieve that. Now the question becomes which product do I need? While the names may be similar, there is a big difference between Enterprise and Web SSO. […]
In the Information Systems industry, as in other related industries, the challenge in deploying the latest solutions is timing. In the software industry, the time that it takes to get a product, solution and new deployments is a key factor for the benefits they offer. In delivering new software products, there is the expression you […]
Many people who use email think that their true identity and location are anonymous. Hidden behind their supposed “cloak of anonymity,” these people may sometimes lash out at their employers, colleagues, political adversaries, ex-lovers, and so on. Thankfully, there are a number of identity management services that can help to reveal the identity of the person who […]
Making changes to a company’s website that alters the visual appearance, written content, or overall message of the website is a form of corporate sabotage that cam harm your company’s reputation and reduce profits. Any company that has a website is vulnerable to website defacement, particularly those without effective identity and security management. To learn […]
