Security Tools

FFIEC Issues a Revealing Cybersecurity Assessment Tool FAQ

Questions from vendor management to mitigating controls covered in the new document. An article review.   The FFIEC released a document earlier this month covering some of the most frequently asked questions surrounding the Cybersecurity Assessment Tool (CAT), and it...

One Step Closer to Secure Mobile Devices

One Step Closer to Secure Mobile Devices DARPA Funds Start-Up Company to Help Better Secure Android Smartphones If you think you have a good patch management and verification program in place, think again!  Sure, you’re supplementing WSUS with Nessus scans or some other thir...

FFIEC Implements New InfoBase Technology

The Federal Financial Institutions Examination Council (FFIEC) has announced that the organization has upgraded the functions and features of the InfoBase for the FFIEC Information Technology Examination Handbook (IT Handbook). The IT Handbook consists of 11 booklets coveri...

Third Party Patch Management

Vulnerabilities come in all shapes and sizes and while operating system patch management has largely been simplified with tools like WSUS, there is still a high degree of risk due to many popular third party applications and the lack of any centralized patching mechanism for...

DNSChanger Malware

Original Post Published by the US-CERT In November 2011, U.S. Federal prosecutors announced Operation Ghost Click, an investigation that resulted in the arrests of a ring of seven people who allegedly infected millions of computers with DNSChanger malware. The malware may p...

Web Application Security Reviews

According to the National Vulnerability Database and nCircle VERT (Vulnerability and Exposure Research Team), Web application vulnerabilities have increased from 1.9% of all published vulnerabilities in 2006 to over 52% in 2009. Meanwhile, even seemingly “benign sites” like ...

Are You the Weakest Link?

I just got off the phone with Dan after he spent the last couple of days at the Indiana Bankers Association’s IT Security Conference. He said it went great! Lots of good information and wonderful speakers. Long story short: I’m a multi-tasker. So, while discu...

Security Culture Maturity Assessment

Establishing a Security Culture . . . Which is it, the chicken or the egg? Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . My curious question is this:  Do you have enough of a security culture to talk your management...

Mark Your Calendars: IBA IT Security Conference

Mark your calendars! The Indiana Bankers Association has scheduled their annual Information Technology (IT) Security Conference for 2010.   This year’s conference is scheduled for October 13th and 14th.   Details of that event will be coming soon, once they are final...