Home

What Kind of Threats and Risks Does the CISO Need to Consider

Posted by Chiranjeev Bordoloi | On: Jan 23 2013 | Comments (0)
CISOs must understand multiple business and technical facets of the organizations for which they work. This understanding provides a foundation for defining a risk-based approach to protect the organization’s critical information assets. The best security leaders...

This Week’s Best IT Security Governance Resources #19

Posted by Chiranjeev Bordoloi | On: Jan 21 2013 | Comments (0)
More and more companies face unique challenges when it comes to detecting insider threats. Here are some basic steps that all organizations should take to monitor insider fraud. Of the many policy issues concerning the tech sector, few are as intensely debated...

After a Cyber Attack, Be Prepared to Follow SEC Guidelines about Communication

Posted by Chiranjeev Bordoloi | On: Jan 18 2013 | Comments (0)
Cyberattacks are becoming more and more common. According to Reuters, most companies hit by cyberattacks don’t go public with the incident. There are, instead, a few guidelines given by the Finance Division of the Corporation Securities and Exchange Commission...

Why we need information security laws and regulations for the financial sector

Posted by Chiranjeev Bordoloi | On: Jan 16 2013 | Comments (0)
Among the most important issues that managers and system administrators in the financial services sector are grappling with is the increased focus on information security laws and compliance. This new global economy and the constant evolution of infrastructure...

What it takes to be a good CISO/CSO

Posted by Chiranjeev Bordoloi | On: Jan 14 2013 | Comments (2)
More organizations worldwide are hiring dedicated security executives. Over the last five years the role of a Chief Information Security Officer (CISO) has changed from a safeguard to being part of the business. The presence of a CISO is almost indispensable in...

This week’s best IT Security Governance Resources #18

Posted by Chiranjeev Bordoloi | On: Jan 11 2013 | Comments (0)
Not surprisingly, with the arrival of the New Year many experts have made their 2013 predictions, with most believing that the biggest threats for this year are on cloud and mobile computing. Thor Olavsrud provided some useful information regarding the top security...

The rise of ransomware

Posted by Chiranjeev Bordoloi | On: Jan 09 2013 | Comments (0)
At the end of last year I was invited to discuss a very specific threat in an interview hosted by CBS News. The main point of interest was ransomware – a type of cyber-attack that is becoming more common and could affect anybody. Ransomware is a type of malware...

CIOs – Build Your Personal Brand to Build Influence at the Board Level

Posted by Chiranjeev Bordoloi | On: Jan 07 2013 | Comments (1)
As we discussed in an earlier post, today’s CIO’s role is more about business strategy and leadership. CIOs are investing time and effort in shaping their personal brand and raising its awareness amongst senior management and industry peers. A survey conducted...

Top 10 Security and IT Governance Articles of the Year

Posted by Chiranjeev Bordoloi | On: Dec 24 2012 | Comments (0)
 I want to present you with a special “this week’s best resources”. Today, I won’t share articles, interviews or webinars that I have compiled from the Wild Web. Instead I am sharing the articles you, my readers, found the most interesting and useful...

IT Security Forecasts for 2013

Posted by Chiranjeev Bordoloi | On: Dec 19 2012 | Comments (1)
As 2012 draws to an end, IT security experts have begun forecasting next year’s security threats. Security breaches, subsequent attacks and all the negative attention put cybersecurity in a really dark place. In recent years the U.S. authorities have invested...