Categories
-
Recent Posts
- Security Awareness and Social Networks: Why You Should Care, and What You Should Teach
- Poor Delivery – 5 Reasons Why Security Awareness Training Programs Fail – Part 2
- If You’re Going to Use PowerPoint
- Don’t Get Bogged Down in “How To”
- The Wrong Content – 5 Reasons Why Security Awareness Training Programs Fail – Part 1
Archives
Monthly Archives: September 2009
The Changing Economics of Training Development

Training isn’t immune from the changes that newspaper and book publishers are facing as production and distribution costs drop dramatically. These days, anyone can create a simple course at little to no cost (except their time) – especially if they … Continue reading
Posted in Education
Leave a comment
Training and …

Browsing around some blogs referenced on Twitter (see … it really is useful for something!), I came across a blog run by a gentleman called Dave Ferguson. In the blog’s “about” page, he writes: … training deals only with skill-knowledge … Continue reading
Posted in Education
Leave a comment
The Mobile Wave

You can’t help noticing it – people everywhere are using their cellphones, iPhones and Blackberries as much as (or more than) their laptops and desktop PCs to access web content. This paper from a recent conference on learning technology talks … Continue reading
Disaster Recovery Plans for Small Businesses

The New York Times has published a useful article on developing Disaster Recovery Plans for small businesses (and, I would assume, other organizations such as non-profits and government agencies). Too many small organizations are putting themselves and, in some cases, … Continue reading
Posted in Information Security
Leave a comment
Crack Your Webmail Password for $33?

The Washington Post has published an article about the continuing availability of password-cracking services as YourHackerz.com, piratecrackers.com and hack-mail.net. They advertise openly, and offer to crack the password of Web-based email systems as Gmail, Facebook, Yahoo, Hotmail, and AOL for … Continue reading
Posted in Information Security
Leave a comment
Cost of a Single Security Breach – US$822,000

It’s often difficult to justify security measures because of the lack of realistic data regarding the cost of security incidents. After all, few organizations want to publicize their mistakes! But, from time-to-time, a snippet of information becomes available that enables … Continue reading
Posted in Information Security
1 Comment
Facebook Applications Have Holes – Lots of Them!

DarkReading is carrying a report about research into Facebook security holes by a researcher known only as ‘theharmonyguy’. He/she is disclosing flaws that he/she has discovered in Facebook and the 3rd party applications that many people use. So far, he/she … Continue reading
Posted in Information Security
Leave a comment
Data Exchanged Between Employees Could be a Security Breach

The Washington Post recently reported that an employee in the National Finance Center sent an Excel spreadsheet of employees’ personal information to a coworker in an unencrypted email. The Commerce Department sent a letter to all affected employees notifying them … Continue reading
Posted in Compliance, Information Security
Leave a comment
Signed Policies Are a Must-Have

A couple of interesting articles today. Germany has just enacted a new law that requires companies to obtain a signed consent from employees before their work communications can be monitored. How this affects monitoring for inappropriate, illegal and insecure communications … Continue reading
Posted in Compliance
Leave a comment