Browse Computer Security by security

Monitoring Home Security with Twitter

Are you worried about your home security? Do you need to keep eyes on who enters your room? Have you left your children alone at home and are worried about their security? If these questions often come in your mind while you are out of your home, then there is no need to worry.

Security Planning: Regulatory Considerations

In this section, I’ll step through—at a high level—four common U.S. regulations which affect what controls you’ll design into your network. We’ll end with a short converstaiton about the PCI DSS, which forms the basis for the remaining sections of this manual.

Security Planning: Data Storage and Sharing

In this section, we continue our look at classifying data with a discussion of common storage locations, how sensitive information is shared or accessed, and retention/e-discovery considerations.

Security Basics - User Awareness

User awareness is an essential part of information security. The existence of policies, standards, and guidelines must be known to the employees that handle your data and manage your infrastructure. This article explores the basics of user awareness training. (This article is updated content from the book, "Just Enough Security.")

Security Basics - Standards, Guidelines, Procedures and Baselines

Policies state management intent and define security outcomes. Standards, guidelines, procedures, and baselines from the operational framework for achieving those outcomes. In this article, we define these security framework elements and their relationship to policies. (This article is updated content from the book, "Just Enough Security.")

Security Planning: Data ownership and classification

Security planning consists of three steps: assigning data owners and data classification, understanding how sensitive information is used, and developing a security strategy and controls design. In this article, we step through the initial planning step: data ownership and classification.

Security Basics - Overview of the Security Program

The framework around which administrative, technical, and physical controls are built is the security program. This article walks through building a program, including policies. (This article is updated content from the book, "Just Enough Security.")

Security Administrative Controls - Part 2

In Part 1 of this two part series, I examined administrative controls that help prevent security incidents. In this article, I conclude our look at administrative controls by exploring controls designed to detect security incidents in progress or after they've occurred. (This article is updated content from the book "Just Enough Security...