Oscar Calle

Vaca: This week’s readings covered a number of topics pertaining to the nature, benefits, and tradeoffs offered by alternative architectures and approaches to establish, leverage, and consolidate digital […]

News of the Week: I found reference to this item on AusCERT Week in Review, discussing efforts of Sophos, a data security provider, to bring attention to a Javascript vulnerability recently highlighted by a web […]

Vaca: This week’s readings provided a wide range of vulnerabilities and controls affecting IT Networks, Unix and Linux operating systems, Internet, intranets, LANS, Wireless networks, Cellular networks, […]

In the News: After reading Vaca’s Chapter 12 on Cellular Network Security I reflected on the fragility of our phone system, and came across an article by author of KrebsOnSecurity describing how he became the […]

PS: There appears to be something wrong with the system clock as it actually is now 6:02pm

David Lanter = tue87168

In the News: “Use of Cloud for Disaster Recovery, Backup and Desktop Set to Rise”

Article reports on a tudy of ~1300 IT professionals, and indicates adoption of Cloud Computing for Disaster Recovery (DR) is […]

Vaca: Chapter 38 – Homeland Security. As I read our assignment I wondered what the US Federal Government’s Recovery Time Objective (RTO) was. On page 667-669 the chapter’s authors list a series of Homeland […]

In the News: “Yahoo’s CEO Checked VPN logs before work-from-home ban”
While the article did not mention IT Risk as a motivator to Marissa Mayer’s review of Yahoo’s VPN logs, it is clear that the CEO’s new policy […]

Readings:
SANS Reading Room Article “Implementing Physical Security – A Lord of the Rings”: An increasing number of IT workers are accessing their organization’s network remotely and engaging in flex-time and […]

In the article: “The Myth of Secure Computing” (Austin, R.D. and A.R. Arby, 2003), the authors recognize and explain why digital security is at the bottom of the priority list of most business executives, and […]

News of the Day: Kevin Liston, in his SANS Internet Storm Center (isc.sans.edu) article: discusses the guidance he provided last week in response to: “My computer is acting strangely, do you think I have a virus?” […]

The two SANS institutute InfoSec Reading Room articles assigned this week provide practical recommendations for implementing security awareness training programs. John Vaca, on the other hand, indicates that the […]

The two SANS institutute InfoSec Reading Room articles assigned this week provide practical recommendations for implementing security awareness training programs. My “In the News” article this week makes clear the […]

The above article is my “In the News Article”.

Dave Lanter

ISACA RiskIT Question for Classmates: The ISACA Risk IT Framework includes three five-tier Domain Maturity Models, one each for: Risk Governance (RG), Risk Evaluation (RE), and Risk Response (RR). As each of […]

Bit9, developer of a Security products monitor, detect and protect against malicious and advanced persistent threats to servers, virtual systems, desktops, laptops, point-of-sale, and SCADA systems did not manage […]

Reading: ISO 27001 – Assignment 1
Comment: I found the header of the corporate Information Classification Policy to be a very helpful example, but found the Information Categories and their descriptions as […]

In the News:
Title: “Oracle quietly releases Java 7u13 early”
Link: https://isc.sans.edu/diary/Oracle+quitely+releases+Java+7u13+early/15061
Comment: The article begins with a mention of Oracle’s quite release […]

I had previously posted this material as a response to the wrong Blog, still figuring where things go, this seems to be right place.

In the News: Supervisory control and data acquisition (SCADA) systems are a […]