Nishant Shah

Vaca: Chapter 38 – Homeland Security. As I read our assignment I wondered what the US Federal Government’s Recovery Time Objective (RTO) was. On page 667-669 the chapter’s authors list a series of Homeland […]

In the News: “Yahoo’s CEO Checked VPN logs before work-from-home ban”
While the article did not mention IT Risk as a motivator to Marissa Mayer’s review of Yahoo’s VPN logs, it is clear that the CEO’s new policy […]

Readings:
SANS Reading Room Article “Implementing Physical Security – A Lord of the Rings”: An increasing number of IT workers are accessing their organization’s network remotely and engaging in flex-time and […]

In the article: “The Myth of Secure Computing” (Austin, R.D. and A.R. Arby, 2003), the authors recognize and explain why digital security is at the bottom of the priority list of most business executives, and […]

News of the Day: Kevin Liston, in his SANS Internet Storm Center (isc.sans.edu) article: discusses the guidance he provided last week in response to: “My computer is acting strangely, do you think I have a virus?” […]

The two SANS institutute InfoSec Reading Room articles assigned this week provide practical recommendations for implementing security awareness training programs. John Vaca, on the other hand, indicates that the […]

The two SANS institutute InfoSec Reading Room articles assigned this week provide practical recommendations for implementing security awareness training programs. My “In the News” article this week makes clear the […]

The above article is my “In the News Article”.

Dave Lanter

ISACA RiskIT Question for Classmates: The ISACA Risk IT Framework includes three five-tier Domain Maturity Models, one each for: Risk Governance (RG), Risk Evaluation (RE), and Risk Response (RR). As each of […]

Bit9, developer of a Security products monitor, detect and protect against malicious and advanced persistent threats to servers, virtual systems, desktops, laptops, point-of-sale, and SCADA systems did not manage […]

Reading: ISO 27001 – Assignment 1
Comment: I found the header of the corporate Information Classification Policy to be a very helpful example, but found the Information Categories and their descriptions as […]

In the News:
Title: “Oracle quietly releases Java 7u13 early”
Link: https://isc.sans.edu/diary/Oracle+quitely+releases+Java+7u13+early/15061
Comment: The article begins with a mention of Oracle’s quite release […]

I had previously posted this material as a response to the wrong Blog, still figuring where things go, this seems to be right place.

In the News: Supervisory control and data acquisition (SCADA) systems are a […]

In the News: Supervisory control and data acquisition (SCADA) systems are a class of industrial control systems used to monitor and control distributed critical national iinfrastructure including electrical […]