Some argue that a cyber-Armageddon — or a “digital Pearl Harbor” — may be just around the corner, while others counter that while cybersecurity needs to be taken seriously, the overall cyberthreat and its consequences are vastly overblown and are merely a convenient excuse to sell over-priced security software and consulting. The May 2011 Cutter IT Journal will try to separate the wheat from the chaff as pertains to security threats from current and potential cyberweapons. Proposals of interest are due 2 March 2011. To respond, please visit http://www.cutter.com/content-and-analysis/journals-and-reports/cutter-it-journal/callforpapers02.html
Category
Security+Privacy
Insight into the information security and privacy issues enterprises grapple with.
Security and the law have not caught up with technology and the outlaws. But most people seem to be ignoring the risks in favor of the opportunities and I don’t see that changing in 2011. A high profile incident is bound to happen, probably sooner rather than later. The headlines this year have been full of security issues facing the internet. First, there was the Zeus Trojan Horse which has stolen millions of dollars from small businesses and individuals. Zeus steals your credentials from your computer, and then uses them to make numerous small transfers from your bank account (under the $10,000 limit for reporting) until it has been emptied out. Since your computer was …
Here at Cutter HQ, as we fondly call it, we’re in full Summit mode: printing badges, packing boxes, tweaking the final menus – getting all the behind-the-scenes stuff done. But that’s certainly not the exciting stuff! What is exciting is the program. As always (this is the 14th Summit we’ve held here in the Boston area), there’s nothing theoretical about the program or sessions. It’s all about creating and discovering business-technology strategies that pave the way for success. And since there are no vendor sponsors, there are no pitches, subtle or otherwise, about silver bullet-type solutions. Here’s a peek at Monday’s sessions: We’re addressing cloud computing. Lou Mazzucchelli’s tackling this topic. If you’ve ever heard …
Early this year, fellow Cutter Consultants Mitch Ummel, Mike Rosen, and I wrote an Executive Report on the Smart Grid. In that report, we talked about all the potential that the Smart Grid offers, how it would be designed, and also about the serious problems that such an ambitious undertaking faces — especially problems related to reliability and security. We expressed fears that since the next generation of Smart Grid electrical utilities is based on current standards taken from the Internet and the current generation of operating systems, it would be subject to serious attacks by more and more sophisticated hackers which, in turn, could seriously jeopardize the reliability and security of our most critical …
Security and data privacy/regulatory considerations are two of the biggest bottlenecks standing in the way of more organizations adopting cloud computing. Simply put, many organizations have serious misgivings about using cloud computing — in particular, software as a service (SaaS) offerings — due to regulatory requirements prohibiting them from using the cloud for storing sensitive data, or due to concerns about the privacy and security of data residing in the cloud. Organizations have also gone to considerable lengths to put the systems and processes in place that enable them to enforce consistent access control policies for their enterprise applications. Thus, it is quite understandable that many organizations remain leery of the security capabilities for ensuring …
Over the last week we’ve received predictions from more Cutter Senior Consultants. Here’s a preview of the latest additions: Rebecca Herold: Bigger privacy breaches than any that have occurred so far on social media sites will occur as a result of no information security or privacy pre-planning at many to most of these organizations. James Odell: systems will no longer primarily be top down. Instead, as individuals, small groups, and organizations interact around the world, technology must support approaches that are more side-by-side. Rob Austin: 2010 will be the year in which mobile devices become the client device of choice in many enterprises. Jim Highsmith: A small, but significant, number of organizations will “get it” when …
The crystal ball gazing continues. Here are more excerpts from Cutter Senior Consultants’ predictions for 2010 and beyond. Dave Rooney: Agile Software Development will follow the same pattern as two other game-changing trends — Relational Database Management Systems and Object-Oriented Programming over the upcoming decade. Claude Baudoin: Expect contractors and consultants to be in demand, and many of them will be ex-employees who, having found their past employer’s loyalty in short supply, will now be more interested in being their own boss than in rejoining as an employee. Ken Collier: Although Agile adoptions will proliferate, we will see an increase Agile project failures due to misunderstanding, misapplication, and misguided attempts to follow an “agile recipe”. …
Since we started putting out the word on Cutter’s annual Summit before the program was 100% final, I’ve received several emails asking about what else is on tap. We’ve got a packed program already, and we’re still squeezing more in! Again this year, there’s nothing “theoretical” about any of the sessions at the Summit. Every keynote, case study, seminar and roundtable discussion is focused on the reality of dealing with the front-burner issues right now (with right now meaning May 4-6). Here are just a few of the highlights: Steve Andriole’s keynote, The 5 Essential Habits of Appropriately Paranoid Business Technology Strategists is sure to raise some eyebrows. Maybe even tempers. If you’ve read any …
Did you KNOW that January 28 was international Data Privacy Day? I bet most of you did not. Too bad. The way to help improve privacy practices within organizations is to raise awareness of privacy issues. I recently blogged about Data Privacy Day here and here. Are you planning to do something for Data Privacy Day? If so, please let us know! I love to hear what folks do to observe such days, and to help raise awareness of information security and privacy issues. Or, if you are not planning to do something, why? Too late of notice? You don’t see the point of doing anything? You think it is dumb? You think…???? Let us know!


Recent Comments