Archive for the ‘Money and Business’ Category

Don’t miss out on Infosec 2008

infosec08_header_logo1.gifSeeing as the Infosec Europe show has now been running 13 years we would sincerely hope that you are aware of the show. If you are, great, here is a reminder that it is on. If not then let us bring you up to speed…

Infosecurity Europe is Europe’s number one Information Security event held on the 22nd – 24th April 2008, Grand Hall, Olympia. Now in its 13th year, the event continues to provide an unrivalled education programme, new products & services, exhibitors and visitors from every segment of the industry.

This years’ event is filled with new and exciting features including the Infosecurity Hall of Fame – where several of the brilliant minds in the industry are speaking, including Bruce Schneier, Adam Laurie and Howard Schmidt.

New for 2008 is the Interactive Theatre, where every attendee can vote and gain real time analysis. A variety of exciting formats from quizzes to courtroom scenarios make these presentations not only informative but fun and entertaining.

The department of Business Enterprise and Regulatory Reform’s Information Security Breaches Survey, carried out every two years, represents the most authorative survey on information security in the UK. The results of this will also be launched at the show in the keynote theatre.

With so much to see and do at the show this year, make sure you register to attend for free now or further information visit www.infosec.co.uk. Also, don’t forget that we list upcoming security shows in our security events section… perhaps it is worth bookmarking?

Read more

Free 2008 security resource guide released

ISC-squared, a company that educates and certifies information security professionals throughout their careers, today announced the release of its complimentary “2008 Resource Guide for Today’s Information Security Professional, Global Edition”.

This 132-page guide provides a wide range of resource listings for security-focused professional associations, public and private sector events, Websites, online and print publications and educational institutions throughout Europe/Middle East/Africa (EMEA) as well as in the North, Central and South America and Asia-Pacific regions. The 2008 Resource Guide is available as a pocket-sized, spiral bound booklet, as well as electronically on CD-ROM and in PDF download format.

The hard copy and CD versions of the guide are distributed every year to tens of thousands of information security professionals at key industry trade shows and conferences and by direct request. In 2006, the Resource Guide became the No. 1 download from the (ISC)2 Website and remains the most popular resource on the site, with an average of 200,000 downloads per year.

“Increased demand for the Guide further demonstrates the ever-expanding state of the information security profession,” said John Colley, CISSP, managing director of (ISC)2 in EMEA. “Practitioners and managers around the world have made it their “go to” tool for educational and networking resources worldwide. We anticipate its content and distribution only to expand further as the profession’s profile increases.”

The 2008 Resource Guide was co-sponsored by global industry organisations such as Microsoft, ChoicePoint, CA, Deloitte, ISACA and others.

The PDF version of the guide is available for download or a hard copy request from www.isc2.org/resourceguide.

Read more

Are todays office workers too slack with our data?

With 21st century office workers engaged in increasingly flexible working practices, extra measures must be taken to protect intellectual property and customers’ personal records.  Organisations must also re-assess how they approach and manage the security of mobile workers. The channel is equipped with the skills to educate businesses on security management and has the opportunity to take advantage of this burgeoning market.

* Many businesses underestimate the importance of securing mobile devices, oblivious to the potential security risks that these small devices bring.

* Handheld devices, being small in size, can be easily lost and stolen by thieves who are attracted by the desirability of the device.

* Most mobile workers don’t think about the security of their data when working remotely.  They often share computers at home, and are less vigilant with equipment while on the move.

* With data breaches consistently hitting news headlines it’s imperative that businesses take action now and invest in using more secure methods of data storage and transfer.

* Data breaches are mainly caused by lost laptops and unsecured CD’s or USB memory sticks and this seems to be an ongoing trend, most recently in the government sector.

* One ongoing issue with IT security is lack of education for the end users. This should be determined by the employer to ensure security outside the office is perceived to be of high importance by the mobile workforce.

* It’s all very well just providing lap tops to your mobile workforce and offering health and safety advice where necessary but it’s also important to think about the risk to the company.

* It’s important that the organisation implements strict protocols on securing company data, and that it also deploys the right resources to enable mobile workers to take those security measures on board.

* Password protection simply isn’t enough to ensure the safety of sensitive date, further measures must be taken.

* The channel should be actively advising organisations of the best way to shield users from mobile attacks as well as educating the market on the best ways of securing the growing number of business-critical mobile devices to help protect sensitive corporate data. There are a whole host of products on today’s market that the channel can offer:
# If there is a need to download confidential information it should be put onto an encrypted CD, this will protect confidential company data and customer information, and should be continually encouraged by the reseller as a viable solution for security

# Organisations can use biometrics to secure mobile workers data.  Fingerprint recognition is one of the best ways to secure USB devices – it ensures that if data falls into the hands of others information can’t be accessed.

# If employees have to leave laptops in their cars, measures need to be taken to secure equipment.  Opportunistic theft is an every day occurrence and laptops remain a target.

* The mobile working market has boomed over the last few years and, according to recent research, the number of staff now classified as mobile workers in UK SMEs has now reached around 50 per cent. (Source: silicon).

* Resellers need to be arming their customers with additional security products to support mobile workers in this growing market and one that shows no sign of decline.

For the channel to truly capitalise on the growing security market and stand out from the competition it’s time for them to think beyond IT.

Opinion from http://www.hypertec.co.uk

Read more

MOD admits massive personal data loss

Hot on the heels of our recent coverage about M&S losing thousands of Employees personal data files, The Ministry of Defence was forced to admit yesterday that three laptop computers containing personal details of hundreds of thousands of military recruits are missing. None of the data on the laptops was encrypted, and contained details of passport data, National Insurance and driver’s licence numbers, family details and NHS numbers for about 153,000 people who applied to join the armed forces. Richard Farnworth, General Manager, Enterprise Solutions, NEC UK comments:

“This latest announcement should certainly act as a wake up call to the Government and all holders of personal data. The security technology and processes currently in place clearly doesn’t protect against human error or malice, so the public sector needs to start following enterprise’s example for its security provisioning.

“To negate such security losses, leaks and breaches in the future, the Government should explore virtualised computing solutions, that allow laptops to purely act as ‘dummy terminals’ where all the data is stored centrally. Therefore, if a laptop is lost or stolen, important data is not able to get into the wrong hands.

“Another viable security solution for non-virtualised laptops and PCs is full disk encryption, that allows data to be encrypted at the hardware level allowing always-on data encryption. However, the need for security in the IT infrastructure is becoming more and more pervasive, encompassing the entire network and the appliances that are attached to it. Therefore, data encryption at appliance level (e.g. PCs) is important, but there is an increasing amount of appliances (e.g. mobile telephones, PDAs, BlackBerrys, virtualised solutions) accessing the network that must also be secured. Encryption, authentication and access control is especially key for these technologies, as is the encryption of the data as it travels across the network and the data protection within server, storage and SAN environments.

“Authentication and verification is continuing to become much more sophisticated and NEC is at the forefront of such developments using a range of multi-modal approaches, such as presence-based access control (e.g. NFC, RFID, and chip & pin) alongside biometric security (fingerprint, facial and eye recognition), which will become increasingly important in the years ahead.

“Ultimately, human error, disclosure or malice continue to be the biggest threats to data security, so if the Government is to avoid the negative headlines we have recently seen, they should be looking to deploy the personalised, multi-modal solutions that we would expect from Government levels of security.”

Read more

ArcSight joins PCI SSC and PCI SVA

ArcSight announced today that it has joined the PCI Security Standards Council (PCI SSC) as a Participating Organization and the PCI Security Vendor Alliance (PCI SVA) as a platinum member.

Read more
Page 15 of 16« First...1213141516

FREE Security Updates

Enter your email address:

Delivered by FeedBurner

Best Security Sites

Computers Business Directory - BTS Local TopOfBlogs