Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

June 18, 2009

Don't Manage Employee Online Activities By Requiring Their IDs & Passwords!

I read a story about a city government agency actually asking job applicants to provide their IDs and passwords for any online social networking type of site they participate in...

 
Continue reading Don't Manage Employee Online Activities By Requiring Their IDs & Passwords!...

March 12, 2009

1746 Organizations In The U.S.'s EU Safe Harbor Program

A type of project I really love to do is a privacy impact assessment (PIA). For companies who collect or otherwise handle the personally identifiable information (PII) of individuals from multiple countries, typically doing a cross border data flow analysis of the PII is within the scope of the PIA.

 
Continue reading 1746 Organizations In The U.S.'s EU Safe Harbor Program...

February 16, 2009

New Online Behavioral Advertising Principles: Self Regulation Does Not Mean Less Scrutiny By The FTC!

On February 12 the U.S. Federal Trade Commission (FTC), the most actively aggressive oversight agency in the U.S. with regard to enforcing privacy protections, released new behavioral advertising principles...

 
Continue reading New Online Behavioral Advertising Principles: Self Regulation Does Not Mean Less Scrutiny By The FTC!...

February 12, 2009

President Obama Wants Better Cybersecurity!

I was very happy to see that President Obama kept his Blackberry, and is using it with super good security controls.

I am even happier to see that he wants to make sure the U.S. has strong cybersecurity in place; I sure hope this helps business leaders to see the need for strong security within their own organizations...

 
Continue reading President Obama Wants Better Cybersecurity!...

January 23, 2009

Business Info Fact Of The Day: Smartphones CAN Be Used Securely!

I thought it was pretty silly to read over the past few weeks that President Obama was being pressured to give up his Blackberry because of security reasons. If information security controls are properly implemented, then there is no reason that the president of the U.S., or any other person for that matter, should not use a smartphone!

I was happy to see the following article published by CNN...

 
Continue reading Business Info Fact Of The Day: Smartphones CAN Be Used Securely!...

January 20, 2009

New Guidelines for Safeguarding Personal Data

Happy U.S. presidential inauguration day! :) Did you take off a few minutes of work to watch the inauguration? I wasn't going to, was planning to just catch videos on the news sites or YouTube later, but then I did, and I'm glad; it was so historical and memorable!

To celebrate, how about I tell you that NIST just made a great new document available...

 
Continue reading New Guidelines for Safeguarding Personal Data...

January 17, 2009

Random thoughts: Network or security changes on inauguration day (1/20)?

I was at an ISACA meeting earlier this week, and over lunch I got into an interesting conversation with a group there about whether or not streaming video feeds were going to be allowed or blocked at the firewall during the inauguration of Barack Obama as U.S. president this coming Tuesday. Some views were that it was an historic event, that most people would not be working any way, and that to maintain goodwill with personnel the streaming videos would be allowed. Others said they would block the streaming video to maintain workable bandwidth, but they were setting up TV monitors throughout the facilities to allow personnel to view if they so chose to; allowing no network impact to others in the company who continued to work.

 
Continue reading Random thoughts: Network or security changes on inauguration day (1/20)?...

January 7, 2009

With New Year & New U.S. Administration, New Compliance Actions Projected

The lack of effective or consistent regulatory oversight over the past 8 years, much of which is blamed in large part for the current economic mess, means, at least to many soothsayers, that a new Obama administration will bring with it not only more aggressive compliance activities, but also a fresh round of new laws and regulations, many of which are anticipated to require much more audit logging, storage and retention, and more stringent access controls.

 
Continue reading With New Year & New U.S. Administration, New Compliance Actions Projected...

December 29, 2008

Insider Threat Example: 19,000 Pieces Of Computer Equipment Stolen; Why Didn't Someone Notice?

Okay, this story begs the question, why didn't someone at the Naval Research Laboratory notice disappearing equipment...?

 
Continue reading Insider Threat Example: 19,000 Pieces Of Computer Equipment Stolen; Why Didn't Someone Notice?...

December 8, 2008

Recommendations To President Elect Obama For How To Improve Cybersecurity

Today the Center for Strategic and International Studies (CSIS) Commission on Cybersecurity for the 44th Presidency released a report, "Securing Cyberspace for the 44th President," that includes recommendations for a comprehensive strategy to improve cybersecurity in federal systems and in critical infrastructure.

 
Continue reading Recommendations To President Elect Obama For How To Improve Cybersecurity...

line

Rebecca Herold's Bio:

Rebecca Herold, CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for the past two decades. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the world's best privacy experts and on their list of the best privacy consulting firms in both 2007 and 2008. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 13th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.