IT Compliance and Controls

In the Wall Street Journal and on several online resources there is documented evidence that an information attack was launched against the country of Georgia and its government systems.  This attack coincided with the Russian offensive.  The implications of this attack are tremendous and shift the theory beyond information cyberwarfare to practical lessons.  A few […]

[Read more →]

There have been recent success in research efforts (mostly academic and theory in origin and a few recently progressing into the more exploitative POC) to identify weaknesses that exist in everything from Firewire connections to the magnetic cards used to access secure facilities.  These proofs of concepts highlight the necessity of a well deployed control […]

[Read more →]

On Sunday a foreign government enforced its sovereign right to censor its citizens, and consequently caused a global outage (2 hours) to the most popular video side in the planet, run by the most sophisticated global internet company - Google.  The lessons here resonate with the need for organizations to consider all aspects of risk […]

[Read more →]

The criticality of the Internet has grown exponentially. Consumers rely on Internet based applications (or RIA) for everything from email, CRM, ERP, publishing - and this online portal. Businesses have generally transitioned from dedicated frame relays, and leased lines to VPN tunnels through the Internet (link to Cisco Whitepaper). The efficiency gained […]

[Read more →]

In my book, IT Compliance and Controls, I highlight the importance of the energy infrastructure, and the risks that these systems face given their newly interconnectedness. To highlight the relevant points from the book - the energy infrastructures of the world support the medical, HVAC, security, and financial systems of our economies. The […]

[Read more →]

The annual 2007 Socha-Gelbmann Electronic Discovery Survey has been released and is a great resource for vetting your current internal approach to managing data, and providing a quick guide for establishing a relationship based on industry opinion.
Interesting facts include - market share, expertise in legal aspects of e-discovery, tools, and more.  A prime component of […]

[Read more →]