Rothstein Associates Inc. Business Survival ™ Weblog

Reducing risk associated with a new technology often requires a combination of overlapping management and technical policies. For example, simply publishing a policy that restricts peer-to-peer networking software may not be sufficient to protect against data leakage if the organization has not defined any controls around computing environments for remote workers. Since many data leaks occur through home-based networks, protection involves a blend of policies including desktop configuration control, acceptable use and physical and environmental controls. As an example, consider this sample policy for Internet Telecommuter Working Environments.

Read the rest of this entry »

Is your organization ready for a cyberwar?

Read the rest of this entry »

Finding more resistance than ever from large businesses, hackers are customizing their malware ploys for SMBs.

Read the rest of this entry »

ISO 27005, issued in 2008, filled a noticeable gap in the ISO 27000 series of standards. The standard is officially titled ISO/IEC 27005.2008, “Information technology — Security techniques — Information security risk management.”

Read the rest of this entry »

The Bipartisan Policy Center (BPC) hosted Cyber ShockWave, a simulated cyber attack on the United States, February 16, 2010 in Washington D.C. providing an unprecedented look at how the government would develop a real-time response to a large-scale cyber crisis affecting much of the nation.

Read the rest of this entry »

On Tuesday, February 16, 2010, the US will undergo a simulated cyberattack to help policymakers decide how well the country would cope.

Read the rest of this entry »

When an employee loses a computer, the information on it is typically more valuable than the hardware, according to this survey of 3,100 IT security professionals. Learn how employees can unwittingly compromise customer information, financial records and intellectual property, and read the seven steps you can take today to reduce the business risk of lost laptops.

Read the rest of this entry »

When the FBI’s Steven Chabinsky spoke recently to Congress, he shared a harrowing message, reports Angela Moscaritolo.

Read the rest of this entry »

“Bombs are not necessary to attack a power station; a keyboard is sufficient,” says Yaniv Levyatan, a University of Haifa, Israel, expert on information warfare.

Read the rest of this entry »

Global critical infrastructure networks are being pummeled with repeated cyberattacks from foreign nation-states and other adversaries, including terrorist organizations and organized crime groups, a report by McAfee concluded.

Read the rest of this entry »

Do you ever worry about losing your laptop computer while rushing to catch a flight at a busy airport?

Read the rest of this entry »