Categories
-
Recent Posts
- Security Awareness and Social Networks: Why You Should Care, and What You Should Teach
- Poor Delivery – 5 Reasons Why Security Awareness Training Programs Fail – Part 2
- If You’re Going to Use PowerPoint
- Don’t Get Bogged Down in “How To”
- The Wrong Content – 5 Reasons Why Security Awareness Training Programs Fail – Part 1
Archives
Author Archives: Steve Addison
Call Centers Not Erasing Credit Card Data from Audio Recordings
Call centers routinely record calls for quality control and training purposes. In a recent survey by Veritape reported in The Register, 95% of the call centers surveyed were found to be storing credit card data such as the three-digit verification … Continue reading
Posted in Information Security
Leave a comment
A Reminder About Availability
When we talk to end users about security, we usually focus on the confidentiality part of the CIA triad – probably because it’s the most visible part of information security. But, every now and then, there’s a news item that … Continue reading
Posted in Information Security
Leave a comment
Phishing URLs at All-Time High
SC Magazine reports that MarkMonitor, an internet fraud and brand-protection vendor, has determined that the number of phishing URLs reached a record high during Q2 2009 with more than 150,000 phishing URLs being established – eclipsing the previous record set … Continue reading
Posted in Information Security
Leave a comment
The Changing Economics of Training Development
Training isn’t immune from the changes that newspaper and book publishers are facing as production and distribution costs drop dramatically. These days, anyone can create a simple course at little to no cost (except their time) – especially if they … Continue reading
Posted in Education
Leave a comment
Training and …
Browsing around some blogs referenced on Twitter (see … it really is useful for something!), I came across a blog run by a gentleman called Dave Ferguson. In the blog’s “about” page, he writes: … training deals only with skill-knowledge … Continue reading
Posted in Education
Leave a comment
The Mobile Wave
You can’t help noticing it – people everywhere are using their cellphones, iPhones and Blackberries as much as (or more than) their laptops and desktop PCs to access web content. This paper from a recent conference on learning technology talks … Continue reading
Disaster Recovery Plans for Small Businesses
The New York Times has published a useful article on developing Disaster Recovery Plans for small businesses (and, I would assume, other organizations such as non-profits and government agencies). Too many small organizations are putting themselves and, in some cases, … Continue reading
Posted in Information Security
Leave a comment
Crack Your Webmail Password for $33?
The Washington Post has published an article about the continuing availability of password-cracking services as YourHackerz.com, piratecrackers.com and hack-mail.net. They advertise openly, and offer to crack the password of Web-based email systems as Gmail, Facebook, Yahoo, Hotmail, and AOL for … Continue reading
Posted in Information Security
Leave a comment
Cost of a Single Security Breach – US$822,000
It’s often difficult to justify security measures because of the lack of realistic data regarding the cost of security incidents. After all, few organizations want to publicize their mistakes! But, from time-to-time, a snippet of information becomes available that enables … Continue reading
Posted in Information Security
1 Comment
Facebook Applications Have Holes – Lots of Them!
DarkReading is carrying a report about research into Facebook security holes by a researcher known only as ‘theharmonyguy’. He/she is disclosing flaws that he/she has discovered in Facebook and the 3rd party applications that many people use. So far, he/she … Continue reading
Posted in Information Security
Leave a comment