Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

Only one in ten organizations has the skills needed in advanced technologies such as business analytics, mobile computing, cloud computing, and social business, IBM found.
The White House recently released a national insider threat policy and standards to guide federal agencies on how to prevent data leaks.
Northrop Grumman said that it has been awarded a contract to build a cyber test range for the University of New South Wales (UNSW), Canberra campus at the Australian Defence Force Academy (ADFA) in Australia.
DHS Secretary Janet Napolitano met with the Homeland Security Advisory Council’s (HSAC) Task Force on CyberSkills this week, where they discussed the latest developments in improving the agency’s cybersecurity initiatives.
Full tuition, expenses and a stipend will be paid at any of dozens of universities for students to get specialized cybersecurity training, in exchange for an equal number of years working for a federal agency.
An Estimated 1,700 people arrived in Louisville, Kentucky on Friday for DerbyCon, and a weekend filled with training, technical discussions, and fine Kentucky bourbon. DerbyCon runs through Sunday, and SecurityWeek will be bringing coverage of the event all weekend long.
According to state media in Iran, the nation has teamed with North Korea in order to cooperate on science and technology, causing some in the InfoSec world to sit up and take notice.
Carnegie Mellon University is launching a new education and certification program designed for information security executives that will emphasize “strategic cybersecurity management”.
In a letter sent to partners, Jay Bavisi, President and CEO of the EC-Council, said that the company responsible for making Certified Ethical Hackers (C|EH) had launched an investigation after one of their own embezzled company funds.
According to the IT Skills and Certifications Pay Index from Foote Partners, ISACA’s CISM and CRISC certifications are the two highest paying credentials in the IT security.

FEATURES, INSIGHTS // Training & Certification

rss icon

Chris Hinkley's picture
Without the internal and external safeguards working in conjunction, your vulnerability will spike and your performance will suffer as a by-product -- two things you can’t afford to have happen.
Matthew Stern's picture
Successful conduct of military operations requires a unit’s clear understanding of the battle space it controls and its “area of operations”. This includes not only the terrain of the battlefield but also the capabilities, motives, and determination of the enemy they face.
Jon-Louis Heimerl's picture
In a perfect world, we would not stress this awareness for one month only. Awareness should be a constant, ongoing effort.
Chris Poulin's picture
Security should be a fascinating, dynamic, and creative pursuit. I say have fun, be creative, be criminal in your thoughts, but not your actions. The black hats who have you in their targets are having a blast.
Jon-Louis Heimerl's picture
External attacks are not our only worry. Most security nuts have been saying for years that our biggest threat is not external, but rather the "Internal Threat." I will take that a step further and say that one of the biggest threats that we face is the "oops".
Oliver Rochford's picture
Oliver makes the case for why the way that security awareness training is often approached is flawed. But if done in the right way, Security Awareness Training can provide a lot of value and benefit the security posture greatly.
Oliver Rochford's picture
In addition to being a renowned theoretical physicist, Einstein was also a wizard at writing security procedures and processes. Here is a short selection of quotes from Albert Einstein, and why they are worthwhile when thinking about security.
Vincent Liu's picture
In developing a Secure Development Lifecycle, you always start by performing an assessment of your current situation in order to establish a baseline of where you stand. Generally, there are two different types of application assessment tools on the market - static analysis and dynamic analysis tools. But what about the human element?
Idan Aharoni's picture
There are many security companies, individual researchers and certain circles in academia that hold a wealth of information on cybercrime activities that could be the difference between a bust and a cybercrime investigation that leads to a dead end. It’s not just about collaboration with other law enforcement agencies, but also about collaboration with the security industry.
Rod Rasmussen's picture
The dangers for a university or college network can lurk everywhere from e-mail to the Internet infrastructure itself. When a student’s computer on a college network is compromised, it’s not just the student who pays the price—legally, so does the institution.