About Us | Contact Us
View Cart

IT Security Fails: 9 Myths about Information Security

By Vigilize | Tuesday, August 14, 2012 - Leave a Comment

IT Security Fails: 9 Myths about Information Security

Antivirus scanners, firewalls, patch updates, secure passwords; all of these are supposed to help keep our information safe and secure. But are they really cutting it? Are our systems and the sensitive information on them sufficiently protected? The truth is, even with all of these supposedly fail-proof security measures, your information may be completely vulnerable to hackers and malicious programs.


Employee Security Education and Training


In this article Roger Grimes points out 9 glaring issues in IT security practices, often pointing the finger at the end-user. And rightfully so. A large majority of the time, the way these exercises in security management fail is the fault of the end-user and not the software or security procedure. He stresses the fact that end-user education and training should be as much a part of Information security protection as any antivirus scanner or firewall. As Grimes says in the article, “it only takes one person, making one mistake, to infect your whole company.”

Use this article as a springboard to get you and your company thinking about myths of information security. Challenge yourself to question some of your own assumptions about information security controls and those of your company.

Original article “9 popular IT security practices that just don’t work” by Roger A. Grimes.


Read the full article here: http://www.computerworld.com/s/article/9230198/9_popular_IT_security_practices_that_just_don_39_t_work

Latest News
    The joint cybersecurity advisory includes the 15 most exploited vulnerabilities reported in 2021… An article review.  While a lot of attention is focused on previously undisclosed or “zero day” attacks, some of the most likely attack vectors are vulnerabilities that have been widely known for weeks or even months.  That’s according to a new joint […]
    Threats are changing, EDR can help us adapt . . . Today’s advanced persistent threat (APT) understands that the IT landscape has changed. In the post-COVID age, more and more organizations have adopted some form of work from home.  While WFH offers many conveniences, it also imparts increased risks. BitSight conducted a 2021 study of […]
    The Five Precepts of IT Vendor Management Webinar-Movie We’re going back to basics on Vendor Management. This webinar will give you a training tool to help out that new person that is starting to take on the gargantuan task that is Vendor Management.
    A new way of helping people “read” new guidance… Look for more in the future! To save you time, we are proud to present “Adam Reads” . . . recorded versions of our Guidance Summaries! Below you can find an embedded player for the audio file. If you are having issues with that working, you […]
    You think you’ve finally found stability in your to-do list. Your goals are set, and you’re even making great progress on them all. Audit findings: all addressed. Management requests: Under control. Heck, you might even be able to leave the office five minutes early at least once this year. Then BAM! A press release from […]
    Software Bill of Materials (SBOMs) are becoming more and more important. . . We are all very familiar with one aspect of the software supply chain – updates.  New features, bug fixes, and performance upgrades are a regular occurrence to any device’s lifecycle, however what if these kinds of updates also include deliberately malicious code? […]
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Check out posters.infotex.com for the whole collection! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape)   You are welcome to print out and distribute this around […]
    According to a new survey, more organizations than ever are reporting problems with cybersecurity staffing… An article review. While pandemic related mandates and restrictions are gradually being lifted across the country, many organizations are still feeling the effects in one important area: staffing.  That’s according to ISACA’s annual State of Cybersecurity survey, which asked over […]
    Understanding Banking Trojans… Another Technical Article by Tanvee Dhir! What are Banking Trojans? A trojan is a malicious program that masquerades as a genuine one. They are often designed to steal sensitive information from users (login passwords, account numbers, financial information, credit card information, etc.). A banking trojan is a malicious computer program designed to […]
    Top Seven Risks . . . that small bank Information Security Officers face in 2022! Once again, we compile this list in preparation for updating our normal board of directors awareness training presentation and movies and such.  This list is meant for community-based banks but could apply to small businesses.  How this works can be illustrated […]