Adam Shostack

APRIL 14, 2021

Microsoft has been trying to get folks to apply critical security patches to address a problem that’s being actively exploited. For example, see our Timing the Application of Security Patches for Optimal Uptime , Usenix Lisa 2002). The two stories are intimately related to people not wanting to roll patches.

Government 49

Government Security IT 49

AIIM

OCTOBER 30, 2017

Obviously digital document accuracy is particularly important for government and regulated industries. Prior to working with Y Soft, Mr. Koelewijn founded X-Solutions in late 2002 which was later acquired by Nuance in 2009. Mr. Koelewijn is married and has two children. He enjoys skiing, swimming and sailing.

e-Delivery 89

e-Delivery File names Compliance ECM 89

ForAllSecure

NOVEMBER 3, 2021

In the dot.com era, 1994-2002, this was the time of the commercial internet, the rise of search engines, and internet browsers. Moss noted that security people he'd known for years were started getting salaried jobs … and started using their legal names. He said security work is that like that. It will have social impact.

Risk 52

Risk Access Government Information Security 52

John Battelle's Searchblog

NOVEMBER 28, 2010

The Google hacking was part of a coordinated campaign of computer sabotage carried out by government operatives, private security experts and Internet outlaws recruited by the Chinese government. It says one source told another that it was the government. No, guys, it does not confirm it. Re-read that paragraph.

Government 79

Government IT Security 79

Data Matters

MARCH 10, 2021

On February 10, 2021, the Council of the European Union (which includes representatives of the European Union (EU) member states, hereinafter Council) reached an agreement on the ePrivacy Regulation proposal that governs the protection of privacy and confidentiality of electronic communications services (ePrivacy Regulation).

GDPR 68

GDPR Metadata Communications Privacy 68

Thales Cloud Protection & Licensing

JANUARY 14, 2020

The adoption of emerging technologies like 5G will fuel the proliferation of Internet of Things (IoT) that’s often built with only a few security controls and therefore creating a larger attack surface that enterprises have to deal with., In the rush to beat the competition, security will be an afterthought as opposed to a forethought.

Data Privacy 89

Data Privacy Privacy IoT GDPR 89

The Last Watchdog

MAY 2, 2019

I often see a sizable gap between perceptions and reality among many SMB leaders,” Troy Gill a senior security analyst at AppRiver told me. I had the chance at RSA 2019 to discuss the SMB security landscape at length with Gill. They don’t know what they don’t know, and this lack of preparedness often aids and abets cybercriminals.”

Risk 183

Risk Cybersecurity Passwords Ransomware 183

Armstrong Archives

JULY 20, 2020

The Sarbanes-Oxley Act (SOX) is a law passed in 2002 that sets forth standards for the recording and reporting of financial activities. It may even violate other regulations such as those governing client privacy. This massively reduces the physical space needed to store them, and it also facilitates security and retrieval.

Archiving 69

Archiving Compliance Records Management Sales 69

CILIP

DECEMBER 9, 2019

As with our information and knowledge Learning Providers, these degrees have been judged against the Professional Knowledge and Skills Base tool (PKSB) and demonstrate the breadth of experience and attributes required for a skilled information professional in the security sector? Since the establishment of the UK?s

Military 40

Military Education Libraries Government 40

eSecurity Planet

APRIL 23, 2021

To fill this gap and aid in the analysis, detection, and testing of malware, sandboxing is widely used to give organizations the setting, isolation, and security tools needed to preserve the integrity of the host network. Most include common security tools like: Threat analysis. Also Read: How VMI Can Improve Cloud Security.

Cybersecurity 57

Cybersecurity Cloud Risk Marketing 57

Schneier on Security

MARCH 13, 2019

In security and privacy, the devil is always in the details -- and Zuckerberg's post provides none. Better security for collected user data. Facebook has a large and skilled product security team that says some of the right things. Shutting down a feature based on internal security analysis would be a clear message.

Privacy 84

Privacy Encryption Access Metadata 84

Hunton Privacy

MAY 1, 2012

3523), which is aimed at facilitating the exchange of cyber threat intelligence information between the government and certain private entities. In addition, the House approved the Federal Information Security Amendments Act of 2012 (H.R. Federal Information Security Amendments Act. Cyber Intelligence Sharing and Protection Act.

Cybersecurity 40

Cybersecurity Information Security Libraries Sales 40

IT Governance

SEPTEMBER 13, 2021

Are you considering a career in cyber security? CompTIA Security+. The CompTIA Security+ qualification is widely considered to be one of the best introductions to the cyber security industry. The CompTIA Security+ qualification is widely considered to be one of the best introductions to the cyber security industry.

Security 93

Security Systems administration Honeypots Risk 93

eDiscovery Daily

OCTOBER 1, 2019

April 18, 2002). Depositions of government agencies are explicitly permitted under Rule 30(b)(6), but if the agency happens to be serving as trial counsel in an enforcement action and also conducted or supervised the underlying investigation, many courts refuse to permit the deposition. Securities and Exchange Commission v.

Government 31

Government Risk Education Security 31

ARMA International

SEPTEMBER 22, 2021

While these RIM practices are still important to help ensure governance, compliance, and manage risks, it is also important to realize that information is both a product and a service. Information Governance (IG). Discussions of IG often lead to a discussion of data governance (DG) and whether the two are different.

Digital transformation 52

Digital transformation Content services IT e-Discovery 52

Schneier on Security

FEBRUARY 28, 2024

After Merck filed its $700 million claim, the pharmaceutical giant’s insurers argued that they were not required to cover the malware’s damage because the cyberattack was widely attributed to the Russian government and therefore was excluded from standard property and casualty insurance coverage as a “hostile or warlike act.”

Insurance 88

Insurance Government Cybersecurity Risk 88

eSecurity Planet

JUNE 17, 2021

Naturally, database vendors are leading providers of database security tools, and a growing number of cloud-based database providers are moving deeper into the data security space. Security is paramount. Starting our list of the top database security vendors is the multinational cloud computing company, Alibaba Cloud.

Security 118

Security Cloud Encryption Computer and Electronics 118

Hunton Privacy

JULY 29, 2016

On July 25, 2016, the Article 29 Working Party (the “Working Party”) and the European Data Protection Supervisor (“EDPS”) released their respective Opinions regarding the review of Directive 2002/58/EC on privacy and electronic communications (the “ePrivacy Directive”).

Communications 45

Communications GDPR Marketing Metadata 45

Thales Cloud Protection & Licensing

SEPTEMBER 26, 2019

The UK government is promoting the MIKEY-SAKKE protocol [16] that implements an identity-based protocol proposed by SAKAI and KASAHARA in 2003. 8,9]) combines signature and encryption in a secure way, providing efficient joint authentication and encryption. Suppose a user Alice works at Thales e-Security in Cambridge.

e-Delivery 91

e-Delivery Encryption Authentication Government 91

Hunton Privacy

NOVEMBER 2, 2021

Promulgated in 2002 pursuant to the Gramm-Leach-Bliley Act, the Safeguards Rule obligates covered financial institutions to develop, implement and maintain a comprehensive information security program that complies with the Rule’s requirements. Security Programs.

Information Security 101

Information Security Risk Compliance Data breaches 101

eDiscovery Daily

FEBRUARY 14, 2018

Platform Technology: CloudNine is a secure, web-accessible, SaaS-delivered offering that allows immediate use of ESI without additional downloads or implementation steps. Company Providing Platform: CloudNine is owned by the company of the same name which was founded in 2002. Platform Security. Cybersecurity. Legal Hold.

Computer and Electronics 50

Computer and Electronics Analytics Cloud Compliance 50

Data Protection Report

JUNE 29, 2018

Similar to GDPR, the law does contain some exceptions, including: information necessary to complete transactions; detect security breaches; protect against illegal activity; or to enable internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.

Privacy 40

Privacy GDPR Personal data Risk 40

Data Protection Report

JUNE 29, 2018

Similar to GDPR, the law does contain some exceptions, including: information necessary to complete transactions; detect security breaches; protect against illegal activity; or to enable internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business.

Privacy 40

Privacy GDPR Personal data Risk 40

Hunton Privacy

MAY 19, 2011

The Working Party takes the position that the processing of geolocation data by companies is mainly governed by the EU Data Protection Directive 95/46/EC (the “Data Protection Directive”), which has been transposed into the laws of the EU Member States. Geolocation data must be deleted as soon as possible.

Personal data 40

Personal data Privacy Access Compliance 40

Collibra

MAY 16, 2022

For financial services, data governance found its roots in risk. Basel II lists seven risk categories with clear reference to data governance given “data entry” and “data maintenance” (Event Type 7). Cyber Security. The SEC mandates this stating firms cannot be in a “ position of auditing their own work” (SOX 2002). .

Risk 102

Risk Government Financial Services Access 102

AIIM

NOVEMBER 2, 2017

In 2002, EC Vice President, Commissioner Viviane Reding initially proposed reform to data privacy rules in the European Union. Information governance frameworks and retention policies only work insofar as they can be applied to the content you need to manage. General Data Protection Regulation: EU Enforcement Gains Teeth.

GDPR 85

GDPR Privacy Compliance Information architecture 85

IBM Big Data Hub

FEBRUARY 6, 2024

Internet companies like Amazon led the charge with the introduction of Amazon Web Services (AWS) in 2002, which offered businesses cloud-based storage and computing services, and the launch of Elastic Compute Cloud (EC2) in 2006, which allowed users to rent virtual computers to run their own applications.

Cloud 109

Cloud Digital transformation e-Delivery Compliance 109

Data Matters

MARCH 21, 2022

Congress has passed a significant new cybersecurity law that will require critical infrastructure entities to report material cybersecurity incidents and ransomware payments to the Cybersecurity and Infrastructure Security Agency (CISA) within 72 and 24 hours, respectively. Background. 651, et seq.

Ransomware 97

Ransomware Cybersecurity Agriculture Communications 97

ForAllSecure

MAY 27, 2021

If you’re struggling to understand how to get your application security testing program off the ground, you wouldn’t be the first. The cyber security market has found that this principle is applicable in software security risk management as well. Find comfort in knowing that this is a common struggle. Known to Other.

Risk 52

Risk Libraries Marketing Security 52

ForAllSecure

MAY 27, 2021

If you’re struggling to understand how to get your application security testing program off the ground, you wouldn’t be the first. The cyber security market has found that this principle is applicable in software security risk management as well. Find comfort in knowing that this is a common struggle. Known to Other.

Risk 52

Risk Libraries Marketing Security 52

Hunton Privacy

FEBRUARY 1, 2013

A Period of Significant Legislative Change – 1994 to 2002. She served until December 2002. She had the opportunity to demonstrate her willingness to challenge the Home Office during the early days of her tenure, when the Government sought to introduce national ID cards. View of the Government.

Data Privacy 40

Data Privacy Privacy Computer and Electronics Education 40

ChiefTech

SEPTEMBER 17, 2012

However, they had no intention of implementing any kind of sophisticated security or access control system. But on intranets, managers spent the following decade trying to use a combination of governance and centralised managed tools such as Web content management systems (WCMS), portals and enterprise search to tame the intranet.

Cloud 89

Cloud Computer and Electronics Communications Paper 89

Hunton Privacy

JANUARY 12, 2016

In addition, the EDPS will participate in the review of Directive 2002/58/EC on the processing of personal data and the protection of privacy in the electronic communications sector, also known as the e-Privacy Directive. Protect EU Borders and Enhance Security.

Personal data 40

Personal data GDPR Privacy Communications 40

Adam Shostack

SEPTEMBER 10, 2019

It’s generally a tournament that spawns over hours if not a few days, where teams don’t fight each other, but rather solve problems with security related techniques. Common examples include hacking company X or being part of covert operations that goes against a dictatorial government. The kind of stuff hackers fantasize about.

Computer and Electronics 45

Computer and Electronics Education IT Security 45

ForAllSecure

MAY 26, 2022

The US Justice Department says it will no longer prosecute good-faith security researchers, but what constitutes good-faith security research? Instead, the US government did, saying quote Stealing is stealing whether you use a computer command or crowbar and whether you take documents data or dollars. Is hacking a crime?

IT 52

IT Security Marketing Privacy 52

ChiefTech

SEPTEMBER 17, 2012

However, they had no intention of implementing any kind of sophisticated security or access control system. But on intranets, managers spent the following decade trying to use a combination of governance and centralised managed tools such as Web content management systems (WCMS), portals and enterprise search to tame the intranet.

Cloud 40

Cloud Computer and Electronics Communications Paper 40

ForAllSecure

JANUARY 22, 2023

Having a common framework around vulnerabilities, around threats , helps us understand the information security landscape better. Literally, how the rebellion fighting the Empire has echoes in how we approach and mitigate information security threats. He’s the author of the acclaimed Threat Modeling: Designing for Security.

Cloud 40

Cloud Security IT Authentication 40