Information Security

10 January 2013 at 12:24pm

ENISA Guide to Risk Mitigation for BYOD

Andrew Cormack
BYOD
Information Security
ENISA have published a useful set of controls and best practices for managing the risks in a Bring Your Own Device (BYOD) program. They identify three groups of controls
Read more

ISO Information Security Standards

Andrew Cormack
Monday, November 12, 2012 - 13:24
Information Security
iso27001
The International Standards Organisation (ISO) maintains a number of different standards in the area of Information Security. Although the standards are not written to directly address the information security issues of research and education organisations they are nonetheless a useful source of information about good practice. External bodies concerned about information security (for example organisations sharing commercially sensitive or personal data, and regulators) often express requirements or questions in terms of the ISO standards.
Read more
12 October 2012 at 9:32am

EU Network and Information Security legislation

Andrew Cormack
Breach Notification
Botnets
Cybercrime
ENISA
Information Security
I’ve submitted a Janet response to a European consultation on a future EU Network and Information Security legislative initiative.
Read more
17 September 2012 at 9:15am

BYOD toolkit

Andrew Cormack
BYOD
Information Security
policies
The US Government’s CIO Council has published an excellent toolkit to help organisations develop appropriate policies for employees to use their own laptops and smartphones for work (known as Bring Your Own Device or BYOD). The toolkit identifies three different technical approaches to controlling the security of the organisation’s information:
Read more
11 December 2012 at 11:15am

Understanding Threats to Mobile Computing

Andrew Cormack
BYOD
Information Security
An interesting talk by Ken van Wyk on threats to mobile devices at the FIRST/TF-CSIRT meeting last week. While it’s tempting to treat smartphones just as small-screen laptops (let’s face it, users do!) there are significant differences in the threats to which the two types of devices are exposed. These need to be recognised in any plan to secure the devices and the information they store and have access to.
Read more
Subscribe to Information Security