Posts Tagged ‘security’

Security en best practice is niet zo’n goed idee

Onderstaand artikel is 4 februari 2011 op Computable geplaatst. Het volledige artikel op Computable is hier te lezen.

Ik was deze week in Dubai op een conferentie van chief information security officers (ciso’s) uit het Midden Oosten. Wat me daar als eerste opviel was de volwassenheid van Informatie Beveiliging in die regio. Als wij in West Europa de beelden op tv zien bekruipt ons al snel een superioriteitsgevoel: ‘ze lopen daar toch best wel achter’. Nou dat doen ze dus niet!

Maar ze willen wel graag leren. En dan zijn er natuurlijk altijd diverse West Europeanen bereid hun goede ideeën te delen. Vooral de aanwezige Britten begonnen natuurlijk direct over ‘best practices’ zoals onder andere verwoord in de ISO 27000 standaarden. Maar om aan te komen met een standaard van meer dan twintig jaar oud als antwoord op vragen over cyber-, cloud- en mobile-security is misschien wel ‘practice’ maar waarschijnlijk niet ‘best’. Read more…

  • Link
  • |
  • Comments (0)
  • |
  • |
1 Star2 Stars3 Stars4 Stars5 Stars
Loading ... Loading ...

  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • Twitter
  • Digg
  • Diigo
  • Reddit
  • Sphinn
  • StumbleUpon
  • Technorati

Security: Good Intentions are not enough

Image adapted from Jon McGovern on Flickr.com (http://www.flickr.com/photos/jonmcgovern/2673202881/)

Recently, I had the pleasure to be involved in a large survey regarding the treatment of privacy and data protection by international organizations. The opinion of a lot of consumers around the world was also taken into account in the survey, which resulted in an interesting mix of views and opinions. One of the most surprising outcomes of the survey to me was that particularly the well organized countries like the Netherlands, Belgium but also the US had a relatively high score with regards to having lost privacy sensitive data.

On average about 58% of organizations around the world admitted to having lost customer data. But in countries like Belgium, the Netherlands and the US the percentage was above 70 which is surprisingly high if you take into account that many of these organizations say that privacy is important to them and that they feel that they have a good security regime to safeguard the protection of their critical data. About 80% of companies in these countries say that they feel that they have adequate security measures. So apparently there is a mismatch between intent and actions. Clearly, good intentions are not enough!

Read more…

  • Link
  • |
  • Comments (0)
  • |
  • |
1 vote, average: 4.00 out of 51 vote, average: 4.00 out of 51 vote, average: 4.00 out of 51 vote, average: 4.00 out of 51 vote, average: 4.00 out of 5
Loading ... Loading ...

  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • Twitter
  • Digg
  • Diigo
  • Reddit
  • Sphinn
  • StumbleUpon
  • Technorati

Cloud Computing versus Security and Privacy: Dark Clouds?

Welcome to my first post on the new Accenture BlogPodium!

If you are a returning reader of my blog, you might have noticed that my blog is now in the Technology theme, rather than the RFID theme. I’m happy about this, because my day to day job is more about Technology and Architecture than about RFID. So let me take advantage of being part of a broader theme, and re-publish an internal article that I wrote earlier this year. Enjoy reading!

(C) 2009, O'Reilly Media (ISBN: 0596802765)Cloud Computing is hot: “Cloud Computing heralds an evolution of business that is no less influential than e-business”.
It might sound very simple: Instead of maintaining your own applications, platforms and servers, you obtain them as a service from outside your own organization, so you don’t have to care about maintenance, performance, scalability, software upgrades and uptime anymore. But is that all? No, there’s more.
According to a recently published research (see this survey and risk assessment) by the European Network and Information Security Agency (ENISA), Confidentiality of corporate data and Privacy are the number 1 and 2 main concerns (and showstoppers) for companies who are on a journey of implementing Cloud Computing.
This article addresses Cloud Computing from a Security and Privacy perspective and introduces a four step approach to overcome cold feed for Cloud Computing.

Read more…

  • Link
  • |
  • Comments (0)
  • |
  • |
2 votes, average: 3.50 out of 52 votes, average: 3.50 out of 52 votes, average: 3.50 out of 52 votes, average: 3.50 out of 52 votes, average: 3.50 out of 5
Loading ... Loading ...

  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • LinkedIn
  • Twitter
  • Digg
  • Diigo
  • Reddit
  • Sphinn
  • StumbleUpon
  • Technorati