Another semester in the bag. I finished my last Information Assurance course in graduate school this past week. The class was on Trusted Systems and we spent a lot of time discussing the Common Criteria, the ratings, mandatory vs discretionary access...

...for a terrific presentation at Tech-Ed 2007 in Orlando!! That's right...in conjunction with the Dallas FBI CyberCrime Team, I'm going to be conducting a session based on the new Microsoft Fundamental Computer Investigation Guide for Windows. Here's...

Well, I'm back from vacation to England. Very cool, but let's get back to what this blog is about: Security . So you got data leaving the business without permission? We all love to think the firewalls are being penterated by the 16-year old in the black...

So yesterday I talked about the real risk that economic/corporate espionage is causing. It's huge!! This topic always ranks in the Top 3 whenever I ask the CSO "What is the biggest security risk you currently have?" Let's face it....every business has...

So we're all technical folks...and we all like to use technical solutions to fix problems. I'm tellin ya, without the proper non-technical controls I mentioned earlier....you're dead in the water. Can't have bacon without eggs and peanut butter without...