Enterprise Security Begins At Home

Since writing a book on home computer security I’ve become increasingly aware of how poor security on home computers is having an effect on enterprise security. But the converse is also true; good home security can have a beneficial influence on the enterprise.

There are several ways in which deficiencies in home computer security can impact businesses. Firstly, malware on home computers is being used by criminals and hacktivists to commit fraud and to disrupt legitimate business use of the internet, through botnets for example. Secondly, more and more staff are telecommuting, or working from home, which may involve transferring documents to the home PC, or using a business laptop in an insecure environment. [Read more...]

How to approach cyber security in 2013

By Mark Danton, general Manager, BT Assure

Looking ahead in 2013, what steps can organisations take to try and manage the threats to their network?

In the second part of our two-part issues on cyber security in 2012/2013, we take a look at three things for organisations to think about in the year ahead. [Read more...]

Making sense of the threats we faced in 2012

By Mark Danton, General Manager, BT Assure.

Looking back at 2012 it’s clear that many of the threats we faced at the beginning of the year are still there for us to tackle. That’s because the world we live in is still evolving from one of static networks, to one where device proliferation and permeable networks are the big issues of the day.

So in the first part of our two-part issue on cyber security in 2012/2013, we take a look at three major challenges organisations have faced and continue to face in the years ahead. [Read more...]

Making peace with cyber war

By Lambert Hofstra, Senior Principal Consultant

At the recent cyber security session in The Hague for public sector officials we wrote about earlier, BT’s security guru Bruce Schneier appealed for a more considered approach to cyber security.  While the cyber threat is real and warrants investment, feeding people’s fears with militaristic talk of cyber war is often unwarranted and can lead to an inappropriate response.

Is the cyber threat blown out of proportion? In his presentation, Bruce Schneier pondered the question, referring to numerous cyber attacks in the past two decades to make the point that while cyber attacks can undoubtedly be very effective and damaging, they often lead to knee-jerk reactions where politicians inappropriately frame the threat in a militaristic framework.  [Read more...]

Cyber security: the challenge of the decade?

By Lambert Hofstra, Senior Principal Consultant

In November the Dutch NCTV (Nationaal Coördinator Terrorismebestrijding en Veiligheid ) and the NCSC (Nationaal Cyber Security Centrum) started a campaign on cyber security awareness. They aim  at sensibilising the public about the fact that we are much more visible than we think in the digital space. Recently Wil van Gemert, Director of the Dutch National Cyber Security Center, and Jan Mendrik, Senior Security Advisor at the Dutch Ministry Security & Justice hosted a cyber security session. It was attended by approximately 65 public sector managers with ICT security responsibilities.

In the session, BT’s cyber security guru Bruce Schneier and Phil Packman, head of the BT Security Customer Advocacy Team and responsible for BT’s Security Operations Center for the London Olympic Games 2012, debated cyber security and the challenges in the public sector with the attendees.  [Read more...]

Success in Cyberspace – more work to be done?

By Sir Mike Rake, Chairman BT Group Plc.

Progress has been made since the launch of the National Cyber Security Strategy (NCSS) a year ago, but there’s still work to be done.  I was delighted to be able to provide an industry perspective on NCSS progress today at IA12 in London.  The annual event organised by CESG has grown in importance over the years and this year BT is privileged to be its lead sponsor. 

Success in Cyberspace needs world-leading cyber defence capabilities but it also needs a view of the future and an understanding of the issues so that the right priorities can be set.  I urge the importance of seeing the big picture to make sure we can all play a part in a successful future. [Read more...]

Searching for an identity

What are the chances of me, you, or anyone you know, sitting down to review, change and securely record all our passwords on a regular basis? I’ll leave you to think that one over.

It’s a real problem: in fact I’d say there’s an inverse proportional link between number of services a consumer uses to the security of his identity – and potentially financial – data. [Read more...]

Attitudes and approaches to online security

[Read more...]

Cyber solutions: technology or finance?

By Professor Michael Mainelli, Executive Chairman, Z/Yen Group Limited

In January 2011 over €45 million was stolen from the carbon markets in several ‘cyber crime’ incidents.

Carbon markets were closed on 19 January 2011 and have fitfully reopened since at much lower values. The January 2011 attacks were preceded by attacks in 2009 and 2010. A 2 February 2010 phishing theft of 250,000 carbon emission permits reportedly netted €3 million and also closed the markets. Furthermore, other financial markets, witnessing the slow responses of the authorities, have questioned the basic links between government bodies and their own markets’ protection. [Read more...]

May the (en)Force(ment) be with you: Security lessons from Star Wars

By guest blogger Terry Greer-King, UK MD for Check Point 

Star Wars: A New Hope is more than just an epic tale of the galaxy-wide struggle between the Galactic Empire and the Rebellion, and the triumph of good over evil. It’s also a great example of how a series of basic infosecurity mistakes can cost even a massive, powerful (but evil) organisation like the Empire dearly.

Ultimately, the Empire was compromised by a fatal combination of weak security policies and poor practice. It’s a classic example of investing in a seemingly-powerful security technology or product (like a Death Star), then building policies based around that technology — rather than starting with a policy that covers what’s critical to their business, then deploying solutions that map to it. [Read more...]