IT Compliance and Controls

COBIT 5 exposure draft is out for review, so sharpen those pencils, order that Grande with an add shot, and find someplace quiet and dig into this design document (note this is NOT Cobit 5.0 but instead the plan at which will be employed to create it.  It is critical to review and provide feedback [...]

[Read more →]

On Sunday a foreign government enforced its sovereign right to censor its citizens, and consequently caused a global outage (2 hours) to the most popular video side in the planet, run by the most sophisticated global internet company - Google.  The lessons here resonate with the need for organizations to consider all aspects of risk [...]

[Read more →]

The criticality of the Internet has grown exponentially. Consumers rely on Internet based applications (or RIA) for everything from email, CRM, ERP, publishing - and this online portal. Businesses have generally transitioned from dedicated frame relays, and leased lines to VPN tunnels through the Internet (link to Cisco Whitepaper). The efficiency gained [...]

[Read more →]

An eye opening report was put forth by the U.S. government (USCC) that focused on the political impact of China on the United States.  The report covered currency, pollution, censorship, information technology, competition, supply-chain concerns, and recommended actions.  The report is an important read to every business executive as a whole given the economic importance [...]

[Read more →]

The generous conference organizers at this years “Hack In The Box Security Conference Series” Malaysia (September 3-6) have posted the full presentations for anyone to download and enjoy. This is an excellent resource for extending your knowledge and leveraging the leading thought leaders in security. My favorite reads include Andrew Cushman’s “State of [...]

[Read more →]