Security Policy Framework Compliance Checklist – available for download.
As previously mentioned, we have updated the SPF Compliance Checklist to make it suitable for use with Version 7 of the Security Policy Framework released a few weeks ago. The…
Updated Security Policy Framework – UK Government Security Standard
The UK Government has released an updated version of the Security Policy Framework (version 7) which reflects changing opinions on the best way to manage security risks within Government. The…
Security Risk Management – Protecting your business
Security risk management is, as we frequently say, important for every organisation. For most businesses it can be a make or break issue and, in lots of industries, there are…
Security Risk Management and Risk Response Options
Proper management of risk is essential to every organisation. Although frequently seen in a negative light, risk is simply an uncertainty of outcome and routinely accompanies new opportunities. Poor risk…
Hospital loses 800 patient’s data
A report has apparently revealed that the East Surrey Hospital has lost an unencrypted USB drive containing the details of 800 patients. According to the Crawley Observer, this data included details such…
Employee Owned Devices
It is difficult for any enterprise level IT hardware supply to keep up with the trend for new, shiny, consumer devices. Most businesses have a multi-year cycle of purchasing assets,…
Business Security – Rapid Security and Safety Review Checklist
It is important that you understand what your current security situation is. This is the bedrock for everything else you do, however, unfortunately most organisations seem to have difficulty pinning…
Hacked out of business?
Most businesses understand that security is important but, as we discussed in a previous post (How do you measure the value of Information Security?) there is a tendency for owners…
Security Investigations, an essential tool
Security always fails at some point. No matter what you do, the bad guys will eventually manage to get past something. Sadly, this is inevitable. The best employee screening program…
Prison Sentences for Data Breaches?
A recent study by CA Technologies indicates that almost 90% of businesses experience some form of data loss (as reported in SC Magazine) and 2009 research from the Ponemon Institute…
Email Security – the risk of typos
We all make typos - nearly everyone suffers from the effects of fingers and brains going out of sync - and it is why the most important tool in any…
How do you measure the value of security?
For lots of people and businesses of all sizes, security is viewed as something which is an unfortunate cost that simply has to be tolerated. In effect, this gives rise…
Risk Management and Measurement
Security is built upon the bedrock of risk management, but this is frequently overlooked and instead things are left to chance. Every activity carries risk and nothing can ever provide…
Security Policy – Essential first step
Security is important. Security underpins pretty much every activity you are engaged in - be it at work or at home. From a business perspective, security can be the difference…
Testing for Insecure Passwords
Despite recent popular opinion and some well publicised hacks involving them, passwords are not intrinsically weak. When used properly, they are a perfectly good, single factor, method of authentication. The important part…