NetIQ Qmunity

Qmunity: Your Colleagues. Your Connections. Your Content.

Sign in | Join | Help | NetIQ.com

Security Web » All Tags » Data Breach (RSS)

Security Web

Home
Contact

Follow Us

Syndication

Recent Posts

Tags

Archives

Is BYOD Now a Done Deal?

We like to think of Bring Your Own Device (BYOD) as a new phenomenon but nothing could be further from the truth. In the 1980s when the PC was introduced, employees started buying them on departmental budgets and running spreadsheets because of the difficulty...

Published Wed, May 05 2013 9:22 AM by David Shephard

Filed under: Data Breach, Compliance, Cloud, iPad, BYOD, Bring Your Own Device, David Shephard, Security Web, PC, Salesforce.com, Lotus 1-2-3
Seussian Adventures in BYOD

Funny things happen when you’ve had a long day of work at a security software company and then go home and read “The Cat in the Hat” to the kids at bedtime. After I’ve been chatting all day with beleaguered IT managers about their...

Published Wed, Aug 08 2012 12:56 PM by Renee Bradshaw

Filed under: Security, Data Breach, Change Control, Compliance, Secure Configuration Manager, Risk Management, Regulations, File Integrity Monitoring, user monitoring, regulation, Consumerization, IT Security, Renee Bradshaw, Requirements, Audits, Monitoring, Security Breach, SIEM, Identity and Access Management, Sentinel, Change Guardian, Mobile Devices, Data Breaches, Mobile Security, Audit Reporting, BYOD, risk assessment, Healthcare, Cisco, Fortinet, Bring Your Own Device, Thing 2, iHealthBeat, Notify Technology, Osterman Research, Dr Suess, Thing 1, Security Web
You’re Fired!

A colleague sent me a reference to a posting recently where after reading the first paragraph, I immediately burst into laughter. Without calling the writer out (which is not the point), I’ll just state that it questioned the purpose and effectiveness...

Published Wed, Aug 08 2012 5:29 PM by Michael Colson

Filed under: Security, Data Breach, Compliance, Data Security, regulation, Information Security, Audit, hacker, password policy, corporate risk, Mandate, policy, PwC, Michael Colson, Vulnerabilities, Security Awareness Training, Procedure, Job Security, Security Posture, Environment, PricewaterhouseCoopers, Privacy Practices, Security Web
Compliance is dead. Long live Compliance!

A few weeks ago, as I was deleting bogus emails from a few friends whose accounts had been hacked and working with my bank to replace a credit card, I began reflecting on security and compliance over the past year and comparing that to trends I see coming...

Published Thu, Aug 08 2012 9:18 AM by Michael Colson

Filed under: Security, Data Breach, PCI DSS, Compliance, Verizon Breach Report, regulation, Information Security, Audit, Mike Colson, hacker, password policy, corporate risk, Mandate, Michael Colson, Security Web
Missing Out on the Benefits of Log Management: Part 2

To continue on to my previous blog surrounding challenges associated with log management programs, many SIEM solutions have the ability to integrate organizational knowledge and context such as roles, entitlements and asset value and use this data to...

Published Wed, Jul 07 2012 9:23 AM by Matthew Ulery

Filed under: Data Breach, Log Management, Threats, log data, SIEM, Matt Ulery, Threat Detection, Matthew Ulery, Security Web
Dealing with Data Security and Privacy Laws

The European Union (EU) has always held personal rights and privacy in high regard, and in January it added 119 pages of proposed tough new regulations and penalties for businesses and government agencies that handle personal data. Every member of the...

Published Fri, Mar 03 2012 10:37 AM by David Shephard

Filed under: Data Breach, NetIQ, Data Protection, Privacy, Data Security, ICO, Social Media, HR, Sentinel, Identity Manager, Tuscany, Italy, Net Studio, EU, European Convention of Human Rights, Directive 95/46/EC, European Union, DPO, Access Manager, Garante per la Protezione dei Dati Personali, E-Privacy Directive, Francesco Pizzetti, Human Resources, European Commission, City of Siena, Duane Morris Alert, Directive 2002/58, Commission nationale de l'informatique et des libertés, CNIL, United Kingdom, UK, Information Commissioner Office, David Shephard, Security Web
Obama NOT Shot - Regardless of Hacker's Claims

This weekend, the Twitter account for Fox News claimed that President Barack Obama had been shot and killed. As it was a holiday weekend, the twitter-propogated 'news' didn't rocket as fast as other events (Michael Jackson death or Derek Jeter...

Published Tue, Jul 07 2011 12:21 PM by JeffCutler

Filed under: Security, Data Breach, Cloud Computing, cloud security, hacking, Twitter, Data Loss, Fox News, Barack Obama, JeffCutler, Security Web
Is SecurID yesterday’s tech? What will protect us now?

RSA Security has admitted for the first time that its SecurID token system was breached. This information, in a letter to its customers this week, said that intruders had breached security at Lockheed Martin using data stolen from RSA. WHAT? Wait just...

Published Fri, Jun 06 2011 1:23 PM by JeffCutler

Filed under: Data Breach, RSA, cloud security, Art Coviello, Breach, WSJ.com, Lockheed Martin, SecurID, JeffCutler, Security Web
Questions and Answers from the Combat Insider Threat Webinar

During the recent webinar: Combat Insider Threat: Proven Strategies from CERT ; Dawn Cappelli , Technical Manager of CERT’s Enterprise Threat and Vulnerability Management Team at Carnegie Mellon University’s Software Engineering Institute...

Published Tue, May 05 2011 9:05 AM by David Shephard

Filed under: Data Breach, NetIQ, CERT, insider threat, Cloud, Fraud, Crime, Software Engineering Institute, Vulnerability, Enterprise Threat and Vulbnerability Management Team, Carnegie Mellon, Dawn Cappelli, Threat, CSO Magazine, unfair dismissal, Laws, Corporate Awareness Training, DOJ, Secret Service, HR Strategies, Renee Bradshaw, IT Sabotage, Ponemon, HR Policy, Outsource, David Shephard, Security Web
InfoSecurity Europe: John Doody Interviews Joern Dierks

At last weeks InfoSecurity Europe 2011 , NetIQ's very own Joern Dierks was interviewed by John Doody. This is a transcript of that interview and includes links to useful resources and organizations as well the video recording of the interview : John...

Published Mon, Apr 04 2011 10:55 AM by David Shephard

Filed under: Security, IT process automation, Data Breach, Insider Attack, NetIQ, Cloud Computing, Change Control, Compliance, Data Protection, Risk Management, cloud security, Data Security, Security Policy, insider threat, IT Security, ISO 27000, Cloud, Service Level Agreements, SLAs, Information Security, InfoSecurity, InfoSec11, InfoSecurity Europe, IT Audit, InfoSec, Auditors, David Shephard, Security Web
New Chart: Detecting Unmanaged Changes to Critical System Files

During a recent webinar: Combat Insider Threat: Proven Strategies from CERT ; I polled the following question to attendees: How do you detect unmanaged changes to critical system files? We wanted to understand how the attendees organizations were monitoring...

Published Tue, Mar 03 2011 4:00 PM by Renee Bradshaw

Filed under: Data Breach, PCI DSS, File Integrity Monitoring, FIM, CERT, insider threat, Priviledged User, Unmanaged Change, Log Files, Logs, SOC, Renee Bradshaw, Security Web
Address Insider Threats without Burdening Your Insiders?

In response to my invitation to our upcoming webinar with Ira Winkler on the topic of insider threat, I received the following question: As combating insider threats seems to be a difficult (next to impossible?) task, one of my primary areas of interest...

Published Tue, Sep 09 2010 11:32 AM by Todd Tucker

Filed under: Security, Data Breach, Group Policy, DLP, Microsoft, insider threat, ira winkler, user monitoring, data loss prevention, database security, Todd Tucker, Security Web
Database Activity Monitoring: Defender of the Corporate Database

The next time you’re tempted to “borrow” your co-worker’s subscriber log-in information for Hoover’s , consider the plight of Goldman Sachs. In early May, the company was slapped with $3 million lawsuit by Ipreo Holdings...

Published Tue, May 05 2010 4:33 PM by Renee Bradshaw

Filed under: Data Breach, Compliance, Data Breach Notification Act, CSI, Data Protection, Verizon Breach Report, Data Security, Database Activity Monitoring, Renee Bradshaw, Security Web
It's all about the data. Here's to SB-1186

It doesn't matter what mandate is your current headache-du-jour - PCI , HIPAA (ok, someone must be worried about it), NERC CIP , SOX or some other acronym , the fact is security of critical data should be the overarching theme. It's all about...

Published Mon, Apr 04 2010 6:25 AM by Geoff Webb

Filed under: Security, Data Breach, Information Week, Geoff Webb, Data Protection, PCI, Data Security, George Hulme, HIPPA: NERC CIP, SOX, SB-1186, Security Web
Short-term gain, long-term pain, and just a little bit of integrity (for files)

For a long time, security teams have been forced to play catch-up to a bewildering number of threats, and an equally bewildering number of technical responses. I recently wrote an article for InfoSecurity Magazine addressing where I think this has left...

Published Fri, Apr 04 2010 3:56 PM by Geoff Webb

Filed under: Forrester Research, Data Breach, PCI DSS, Geoff Webb, Compliance, Data Protection, Data Security, John Kindervag, File Integrity Monitoring, FIM, Security Web

Footer Border

Home | Terms of Use | Privacy Policy | NetIQ.com | Attachmate.com

NetIQ, an Attachmate Business