ISC2 Blog

An Appeal to the White House on Behalf of the (ISC)² Membership

As the new executive director for (ISC)², one of my most critical goals is to be a global ambassador for our membership. Recently, the U.S. White House proposed reforms to the Computer Fraud and Abuse Act (CFAA) of 1986, which aim to prosecute those who exceed authorized access to online networks. If this proposal is enacted by law, it could make it more difficult for cybersecurity practitioners to perform their jobs to defend their organizations against malicious threats. Many (ISC)² members, with a high degree of professionalism and ethics, use tools that could fall under such prosecution for penetration testing... Read more →

What is a security expert?

Characteristics that make a security practitioner an expert in his field: Advanced theoretical knowledge proven by international certifications Practical experience in applying security Ability to communicate with all levels, according to their level of understanding, from board level to end-user Ability to find solutions which are not in books and prioritize them Ability to view the risks beyond the obvious and act upon - be proactive and not reactive Ability to choose a solution which represents a fair trade-off between security and usability Read more →

Advice for Parents to Protect Children in an Advancing Cyber World

Protecting children from online dangers is no easy task for parents today. There is no shortage of research offering insight into the concerns. In the U.S., Internet filtering software company Covenant Eyes tells us that 54% of girls are friends on social networks with someone they have never met in person: And, 74% of children have been contacted by a stranger online. Another study released today by the U.K. Safer Internet Centre, takes a look at the huge role that technology plays in supporting young people’s friendships, with 55% of the 150 11-to 16-year-olds who participated in their online survey... Read more →

Comments from (ISC)² Leadership on Health Insurer Anthem's Breach

The impact of an identity breach is potentially more dangerous and harmful than that of a credit card breach. Credit card breaches are quickly mitigated by issuing a new card and account number – a routine process for card-issuing banks. Even with massive credit card breaches, actual credit card fraud is low because banks are so adept at responding. Identity attacks, such as the one on Anthem, will likely have a longer lasting and more devastating impact. The disclosure of Social Security numbers and other data points such as income, employment status and birth dates allow attackers to sell this... Read more →