Page 134 - Latest interviews and insights on information security careers

Events

Cyber-Attacks: The New Maturity

Tom Field • April 25, 2013 15 Minutes

It isn't just the quantity of cyber-attacks that's staggering; it's the quality. The average hacker now has access to nation-state-level attack capabilities, says James Lyne of Sophos. How can organizations defend?

Events

Addressing the Skills Crisis

Tom Field • April 25, 2013 5 Minutes

It isn't a staffing shortage that we face, but rather a skills crisis, says Allan Boardman, international vice president of ISACA. How can organizations build the security skills they need to mitigate evolving risks?

Events

The New Era of Third-Party Risks

Tom Field • April 25, 2013 10 Minutes

Organizations face new cyber-risks from their third-party service providers. But standard contracts fail to cover these risks. Trend Micro's Tom Kellermann discusses the risk management essentials.

Events

Privacy Across Borders

Tom Field • April 24, 2013 5 Minutes

As data protection regulations continue to be refined, organizations throughout Europe are more sensitive to privacy restrictions in individual countries, says Dwayne Melancon, CTO of Tripwire.

DDoS Protection

Why DDoS Attacks Are 'No Big Deal'

Tom Field • April 24, 2013 7 Minutes

Distributed-denial-of-service attacks are increasing against European banking institutions. But UK consultant Mark Child says if banks are worried about DDoS, then they have bigger security problems.

Professionalizing the IT Security Field

Eric Chabrow • April 23, 2013 8 Minutes 29 Seconds

Should IT security practitioners be deemed professionals like those in medicine and law? That's not an easy question to answer, says Ronald Sanders, former human capital officer at the U.S. Office of the Director of National Intelligence.

Business Continuity Management / Disaster Recovery

Verizon Report: DDoS a Broad Threat

Tracy Kitten • April 23, 2013 12 Minutes 36 Seconds

Distributed-denial-of-service attacks jumped significantly in 2012. And it's not just banking institutions that are victims, Verizon finds in its just-released Data Breach Investigations Report.

Events

ENISA Aims for Longer, Stronger Role

Tom Field • April 22, 2013 20 Minutes

The European parliament recently voted to extend and strengthen the European Network and Information Security Agency. What does this news mean for Europe's top cybersecurity agency and for the state of emerging threats across Europe?

Business Continuity Management / Disaster Recovery

Boston Lockdown: Business Continuity

Eric Chabrow • April 19, 2013 4 minutes 36 seconds

The hunt for a Boston Marathon bombing suspect that locked down the city caused massive disruption to business operations, but enterprises that had business continuity plans in place hardly missed a beat.

Governance & Risk Management

Will New Hires Impede Future Security?

Eric Chabrow • April 16, 2013 8 minutes 40 seconds

The rush to find qualified IT security professionals to meet current cyberthreats could jeopardize IT systems' security in the not-too-distant future, say two leading IT security experts, Eugene Spafford and Ron Ross.

CISO Trainings

A CIO Outlines Top Security Priorities

Marianne Kolbasuk McGee • April 12, 2013 15 Minutes

Improving regulatory compliance and security training, as well as detecting and preventing breaches, are top priorities for 2013, the Healthcare Information Security Today survey shows. Sharp HealthCare CIO Bill Spooner tells why those issues are critical.

Professional Certifications & Continuous Training

Security Careers: Breaking Barriers

Tracy Kitten • April 9, 2013 10 Minutes

Lisa Xu, CEO of NopSec, says pursuing leadership roles in information security - a male-dominated field - can be challenging for women. What advice does she offer for women to grow in their careers?

Cloud Security

Can Moving Data to Cloud Reduce Risk?

Eric Chabrow • April 9, 2013 15 Minutes

NIST's Ron Ross sees complexity as the biggest risk enterprises face. To ease risk, Ross favors moving data to the cloud. Purdue's Eugene Spafford doesn't fully subscribe to Ross' plan. The two square off in this interview.

Anti-Phishing, DMARC

BITS: Improving E-mail Authentication

Tracy Kitten • April 4, 2013 15 Minutes

E-mail authentication foils phishing, but authentication is only effective if every partner in the chain adopts it. John Carlson and Andrew Kennedy of BITS explain how institutions can improve e-mail practices.

CISO Trainings

CISO as Chief Privacy Officer

Eric Chabrow • April 2, 2013 10 Minutes

Intel has added privacy to the portfolio of its top information security executive, Malcolm Harkins, who says too many information security professionals are "color blind or tone deaf" to privacy, wrongly thinking strong data protection provides privacy safeguards.