The first thing to note is that both of these media sources are written by and for members of the information security business — it is in their interest to manufacture a threat, for the simple reason that threats mean business for these groups.
As is the case for other job functions, outsourcing has become a notable part of the information security business landscape.
Charles Sharland, chairman and co-founder of AppSense, and the company's recently appointed CEO Darron Antill together used to lead Vistorm, which was acquired by EDS back in 2008 and now makes up – essentially – HP's entire Information Security business.
An identity solution that gives control of personal identity back to the individual would reduce operational costs of businesses that never wanted to be in the information security business in the first place.
We talk a lot about personally identifiable information (PII) in the data security business, but rarely do people realize exactly what that can include, and how much of that information is readily accessible online -- not to mention how much PII they may be unwittingly putting out there in the overheated look-at-me world of social networking.
As consumers become increasingly aware of the role of information security in business, Matwyshyn says corporate ethics must change.
There are job openings in information technology, the security business, the credit and credit-analysis industries and asset management, he says.
Patrick Gray, host of the information security podcast Risky Business, shared "trusted" analysis on Twitter that suggested the website's servers had not been coded to "load balance to other servers" in the event of overload.
However, there has been a marked increase in spending on information security in small businesses.
This approach to defense in-depth gets us thinking about the details, in terms of the specific controls we may need to deploy to reduce, transfer or eliminate risk for the business. It is also helpful, I find, to lay out this framework when conveying an overall information security strategy to the business, CIO and/or Board members.
U.S. Trust's business information security officer says encryption can be overkill in some situations because criminals are more likely to go after the low-hanging fruit, the endpoint, by sliding in a keylogger, or sending out a phishing email — rather than going after an encrypted file.
