http://www.brighthub.com/search/searchresults.aspx?u=1779&o=DateDescending&a=275Posts by Tom Olzak, CISSPen-UShttp://www.brighthub.com/computing/enterprise-security/articles/7562.aspxWed, 17 Sep 2008 18:06:14 GMTb133e95a-c263-4882-8f2a-b24547eff78e:7562tomolzakSometimes a script or other application providing automatic management oversight over end-user devices or servers needs session and logon data. Two free utilities provide the functionality necessary to achieve these outcomes in a Microsoft Windows environment. Overview Occasionally, security and network administrators need information about who is ...http://www.brighthub.com/computing/enterprise-security/articles/3098.aspxThu, 24 Jul 2008 21:32:26 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3098tomolzakIn this series of articles, we examine how to prepare for and manage data loss incidents in a way that minimizes financial business impact or harm to customers or employees. In Part 1, we begin with an overview of the process and a look at the first steps of the process. Why Security Incident Management Is Necessary Once a security incident occurs,...http://www.brighthub.com/computing/smb-security/articles/22969.aspxTue, 20 Jan 2009 12:53:40 GMTb133e95a-c263-4882-8f2a-b24547eff78e:22969tomolzakEncryption is a big topic, much bigger than can be fit into a section of a small, business manual. This article provides enough information about the how, what, and why of encryption that an owner or manager of a SMB knows when it’s reasonable and appropriate to encrypt information. What is Encryption? Very simply, encryption changes read...http://www.brighthub.com/computing/enterprise-security/articles/3105.aspxThu, 24 Jul 2008 23:42:21 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3105tomolzakThis is the final article in the series on data security incident management. This focuses on how to manage data security systems and the causes and effects of data systems or network system failures in a company. Reviewing Data Security Management and How to Improve Overall Data Security The activities related to this step take place after all oth...http://www.brighthub.com/computing/enterprise-security/articles/3104.aspxThu, 24 Jul 2008 23:31:08 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3104tomolzakIn this article, we continue the series on data security incident management with an examination of what happens after a software or human security threat is identified and contained: eliminate the data security threat and restore data and network services. Eliminating Possible Data Security Threats and Attacks It’s nearly impossible to define ...http://www.brighthub.com/computing/enterprise-security/articles/3101.aspxThu, 24 Jul 2008 23:06:30 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3101tomolzakIn the previous articles in this series, we looked at preparing for incidents and how to detect and analyze them when they happen. In this article, we examine how to contain a network security threat agent, minimizing the impact to a business. Minimizing Data Security Threats Once you understand the nature of the security threat on your enterprise,...http://www.brighthub.com/computing/enterprise-security/articles/3099.aspxThu, 24 Jul 2008 22:48:31 GMTb133e95a-c263-4882-8f2a-b24547eff78e:3099tomolzakIn Part 1 we defined data incident management and examined how to prepare for incidents when they occur. In this article, we continue the series by examining how to prevent data loss and network outages. The methods of detecting, analyzing, and reporting data issues to recovery teams are explained. Types of Data and Network Security Controls Detect...http://www.brighthub.com/computing/smb-security/articles/24417.aspxFri, 30 Jan 2009 18:37:56 GMTb133e95a-c263-4882-8f2a-b24547eff78e:24417tomolzakFind out how to design a secure company network, including remote access and internal security. Network Security Design Considerations Designing network security for a SMB requires following the same basic principles as those governing large enterprise security. It’s all about the data . When securing your network, always consider the sensitivity o...http://www.brighthub.com/computing/enterprise-security/articles/12141.aspxWed, 22 Oct 2008 11:49:29 GMTb133e95a-c263-4882-8f2a-b24547eff78e:12141tomolzakPsInfo is a free, downloadable utiliy which enables both local and remote Windows platform configuration retrieval. The Challenge Both system administrators and security analysts frequently need information about Microsoft Windows patch levels, applications installed, and drivers used. It isn’t always easy to obtain this and other information. Eith...http://www.brighthub.com/computing/enterprise-security/reviews/5298.aspxSun, 24 Aug 2008 19:11:29 GMTb133e95a-c263-4882-8f2a-b24547eff78e:5298tomolzakPhishing is a common problem, growing at a rapid rate. Organizations not addressing employee weaknesses for great buys or other appealing reasons to click on links in email messages will soon feel the pain. This is a review of Phishme, an online solution designed to help. What is Phishme Phishme is the "good guy's" answer to increasingly ...