securitycompliance

2nd Tuesday(Patch Tuesday) came & went now what?

by

I did not post about Patch Tuesday last week, So here is the rundown of what happened: Microsoft:   Cisco issued an Advisory on the 13th (Wednesday actually) http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tp It is for their TelePresence products. http://windowsitpro.com/patch-tuesday/patch-tuesday-may-2015-brings-unlucky-13-3-critical-updates I had to show this picture of me on the switchboard after seeing the image in WindowsITPRo   The … Read more

Security: Fail-to-Plan Plan-to-Fail

by

Yes I am sure you heard the saying:  If you fail to plan, Plan to fail How does one plan for as secure as possible while also meeting business objectives? Harry Folloder(CIO of Advantage WaypointLLC – 10$Bil in food service sales) has 6 tips in this article: http://www.darkreading.com/attacks-breaches/building-a-stronger-security-strategy-6-tips/a/d-id/1320247? Being in charge of a large IT … Read more

Oct: Swipe&Sign + Breach = Merchant Liable Not CC companies

by

The Cybersecurity field knows this has been in the works for a year now, and in 5 months it will happen.   Chip in a Credit card The US will catch up to the rest of the world as world travelers know this.  (Europe has had it since 2004) http://www.creditcards.com/credit-card-news/american-travelers-guide-emv-chip-cards-1271.php In this image from the … Read more

How much Security is enough?

by

Tim Wilson at DarkReading is discussing a little on how to discuss security issues, goals, and concerns. Of course his message is a basic and simple one how much should anyone be concerned with security.   A business has to have sales to operate. To have sales, there must be customer service, installation and other essential … Read more

Where does PCI Compliance Fail?

by

Put another way if everyone keeps saying being PCI compliant does not mean being secure, where exactly does this occur – the failure of PCI compliance? One major difference is that PCI compliance does not cover security breaches outside of credit card number information. The law covers notifications of security breaches on Personally Identifiable Information … Read more