Security Manager's Journal: Trapped: Building access controls go kablooey
Doors just stop working when one old PC in a storage closet dies.
Doors just stop working when one old PC in a storage closet dies.
Why have recent vulnerabilities gotten so much more attention than the ones that preceded them? It's hard to say, but the new awareness is a mixed blessing.
The end of Microsoft support is fast approaching, and the company still has a lot of machines running the old Windows operating system.
And without remote management, getting patches onto devices scattered throughout the organization is hit or miss.
Recent data breaches suggest that retailers are security laggards, but the professionalism of the attacks should worry just about anyone.
Scammers are nothing if not innovative. It just goes to show that the best defense is an educated workforce.
This tool helps with a lot more than telling you at a glance about the threats you face.
In-house developers show themselves to be woefully behind the times when it comes to security via authentication.
The passwords most people choose could be stronger, but providers need to make it easier to create really strong passphrases. And when will we be able to leave passwords behind and use alternative authentication methods instead?
Android smartphones and tablets have become ubiquitous at our manager's company. What happens now that the Android ecosystem appears to be riddled with security pitfalls?
Our intellectual property and sensitive data have been leaving the relatively safe confines of our internal network without adequate security precautions, all because users find it convenient to get their company email in their personal webmail accounts.
The network team is on board with plan to update the devices to current versions, but who will do the work?
Windows service accounts used by software are often given domain administrator rights, just because it's quick and easy. That sort of thing rubs security managers the wrong way.
The desktop group is pushing to abandon enterprise-class tools for built-in antivirus, firewall and encryption software from Microsoft. Is that any way to run a business?
A managed security service might be the answer, our manager thinks.