(ISC)² Blog

Insecure of Things

During this exciting time of technological advancements, when there is an app for every facet of our lives, from letting you know the right time to take a bathroom break during a movie to how to build a space shuttle, why am I continually disappointed? We have become a generation addicted to our apps and having the latest and greatest technologies, but that comes with a steep price. We have to continually ask ourselves with every purchase and click, what is my data and privacy worth if and when it is leaked, breached or stolen? George Santayana wrote: “Those who... Read more →

(ISC)² Member Devon Bryan Earns Fed 100 Award for Working to Change the Face of Security

Devon Bryan, an (ISC)2 member for nearly 20 years, is receiving a distinguished Federal Computer Week Federal 100 Award this year. The award recognizes 100 U.S. government and industry leaders who have played pivotal roles in the federal government IT community—individuals who have gone above and beyond their daily responsibilities and have made a difference in the way technology has transformed their agency or accelerated their agency's mission. Devon and the other winners will be honored at a gala ceremony on April 7. Devon served in the United States Air Force as a Lead Network Engineer for 11 years. After... Read more →

Cloud Security - Where to Begin?

[Translated from Spanish] The use of tools in the cloud and hybrid cloud have reduced business costs and stimulated unprecedented growth in adoption rates worldwide. Several studies show that the cloud is here to stay; which makes it important to analyze the most efficient ways to control and reduce risks, such as threats of invasion, attacks, leakage of sensitive information and unavailability of services. Cloud security is one of the main concerns of IT managers. In addition, the Cloud Security Alliance (CSA) reveals that only 16 percent of organizations have fully implemented policies and controls around using the cloud. The... Read more →

Segurança na Nuvem - Por onde começar?

A utilização de ferramentas na Nuvem e Nuvem Híbrida tem reduzido os custos das empresas de forma inédita, e estimulado o seu crescimento em todo o mundo. Diversas pesquisas revelam que a Nuvem chegou para ficar, o que torna importante a análise das medidas mais eficientes para controlar e mitigar riscos, como ameaças de invasão, ataques, vazamento de informações sensíveis e indisponibilidades de serviços. A segurança na Nuvem é o principal motivo de preocupação dos gestores de TI no mundo. Estimativas indicam que mais de 70% deles não confiam nas técnicas tradicionais de proteção dos dados. Além disso, a Cloud... Read more →

Seguridad en la nube - ¿Por dónde empezar?

La utilización de herramientas en la nube y en la nube híbrida ha reducido los costos de las empresas de forma inédita y estimulado su crecimiento en todo el mundo. Diversos estudios revelan que la nube ha llegado para quedarse, lo que torna importante el análisis de las medidas más eficientes para controlar y reducir riesgos, tales como amenazas de invasión, ataques, fuga de información sensible e indisponibilidad de servicios. La seguridad en la nube es el principal motivo de preocupación de los gestores de TI en el mundo. Las estimaciones indican que más del 70% de ellos no confía... Read more →

The Accidental Security Threat: Insiders

Insider threats can be malicious; but more commonly, they are accidental. The weakest point in any security program is people. They can have ill intent, they can also be manipulated or exploited, and they can simply make a mistake and email a spreadsheet full of client information to the wrong email address. These types of incidents are real and happen every day. They can lead to disastrous results on par with any major external cyberattack. Traditionally, these threats are overlooked by most businesses as they are more concerned with the unknown malicious actor than the known staff member or business... Read more →

Dispelling Myths - The Role of the (ISC)² Board of Directors

As chair of the (ISC)² Bylaws committee, I want to provide clarification about the role of the (ISC)² Board of Directors. There seems to be ongoing confusion by some members about the role of the board, and I’d like to clear up the confusion. There are two documents that govern the responsibilities and activities of the organization: the Articles of Association and the Bylaws. The Bylaws clearly state: The Board of Directors shall have the powers and duties of a board of directors pursuant to the laws of the Commonwealth of Massachusetts, and shall be responsible for the policy and... Read more →

The Need for Encryption Legislation

The current stand-off between Apple and the FBI highlights a growing problem: How do we balance privacy rights with the current patchwork of legislation that has failed to keep pace with the technological advances changing business and society? For anyone following current events, the ongoing debate displays the need for comprehensive legislation. Will Apple continue to defy the court order and, in essence, prevent the government from gaining information from a corporate owned device used by a dead terrorist? Is the government prepared to set a precedent and force Apple and other companies to knowingly provide code to make it... Read more →