Category: News

According to Eric Domage, IDC EMEA program manager, European security products and strategies, the survey reveals that organisations believe the most significant impact of a security breach would come from the lack of control of its intellectual property (IP).

Campbell adds, “The challenge when protecting an organisation from internal attack is that traditional defences are designed to face outward, at the perimeter of a network, whereas the inside of the network remains relatively free of security controls.

“Besides, at the employee level, protection of data goes beyond technology in that it involves the human resources department and in turn, raises a range of new legal issues around areas such as monitoring and fair use”, explains Campbell, and points out that organisations tend to believe that it will add a layer of managerial and process complexity that they don’t want to confront.

It’s a technology-centric approach to managing the issue of protecting sensitive data, it’s an important strategic step forward.

http://www.prlog.org/10384661-user-errors-will-lead-to-data-leakage-worldwide-survey-on-it-security.html

In-Q-Tel, the investment firm established by the CIA to support U.S. intelligence agencies, has invested in Visible Technologies, a start-up that monitors social media content on the Web.

Visible Technologies’ software-as-a-service apps are used by companies to monitor and manage their brands by observing and analyzing public opinion on the Web in real-time. Visible Technologies’ TruCAST engine “casts a net on whatever the client wants to know more about,” said senior VP Blake Cahill. Visible Technologies has been focusing increasingly on the government sector, and it has done some work through the General Services Administration, according to Cahill.

http://www.informationweek.com/news/government/info-management/showArticle.jhtml?articleID=220900005

The CA Security Management business, which provides integrated identity and access management, security information management, and data loss prevention solutions, will be collaborating with TSCP to help partners accelerate adoption of standards designed to build a globally secure critical infrastructure.

As the newest TSCP Gold member, CA will actively participate in reference implementations of TSCP’s secure collaboration specifications and speed time to market for commercial-off-the-shelf (COTS) solutions that are aligned with industry requirements. “Several of our customers and partners are represented in this program and we consider it a privilege to be working with them to fulfill the TSCP mission,” said Dave Hansen, corporate senior vice president and general manager for CA Security Management. “Our global A&D and government agency customers are involved in global mission-critical projects, and we understand the challenges for secure collaboration at that level.

CA will participate by providing technology expertise for world-class identity and access management, including Web access management, identity federation, single sign-on, user provisioning and more.

http://nasdaq-ca.blogspot.com/2009/10/transglobal-secure-collaboration_14.html

“Much of the legal work remains to be done and it is difficult to anticipate when these matters will come to a conclusion.”

Carr also admitted for the first time that since the Princeton, N.J.-based processing giant announced a breach of its systems, some of the payment processor’s clients have switched to competitors as a result of the breach.

“We have had some competitors telling merchants falsely that they would be fined $10,000 a day if they stay with Heartland.

More than $500,000 relates to a fine assessed by MasterCard against the sponsored banks in which the card company said Heartland failed to take appropriate action upon learning that a breach was suspected.

“Heartland believes that it responded appropriately to all the information that it learned regarding the possibility of a system breach and upon discovering the intrusion it took immediate and extraordinary action to address the intrusion,” Carr said. In addition, the company said it would implement end-to-end encryption when payment transaction data is sent from the merchant to the processor. Heartland is in discussions with some of the card brands to improve encryption, he said.

http://searchfinancialsecurity.techtarget.com/news/article/0,289142,sid185_gci1355922,00.html

Amit Yoran, CEO of security firm NetWitness and the former director of the National Cyber Security Directorate at the DHS, criticized today’s risk management practices.

The security industry is awash in bad data, and companies that attempt to use the metrics could take the wrong actions, he said.
The process requires that executives work with their security group to find the right way to measure security for that specific company, he said.
“Set the expectations that a lack of due care is not going to be tolerated.”

http://www.securityfocus.com/brief/926?ref=rss

Becoming part of the network is required under the Convention on Cybercrime, an international treaty that sets a legal model for other countries to follow when writing anticybercrime legislation.

Of 47 countries that are part of the Council of Europe, 24 have ratified the treaty, and 23 others have signed it but are awaiting their national legislatures to ratify it.

The 24/7 Network is intended to improve coordination between law enforcement, as Internet scams and frauds are often executed using networks of hacked computers located around the world. That poses much difficulty for law enforcement, as potential evidence could be quickly erased or lost, making prosecutions difficult.

On Wednesday, law enforcement, government officials and security professionals held a closed-door meeting at the International Conference on Cybercrime in Strasbourg, France, to discuss its status.

http://tech.yahoo.com/news/pcworld/20090312/tc_pcworld/worldwidecybercrimepolicenetworkgrows