-
30 Dec 2008Interesting solution to the new Red Flags requirements
I can't vouch for the quality of this offering I recently came across it but it does look interesting. It's called CompliancePal and it helps businesses automate/manage the requirements of the new FTC Red Flags Rules that are intended to help fix the problem we have with identity theft here in the U.S.Heaven knows business managers need help taking the pain out of the compliance process wherever they can!...
Continue Reading... -
30 Dec 2008
What if you had to pay for your software licenses?
I've learned the hard way and have since touted the benefits of automating as much as you can when it comes to IT and security management. Software licensing is no different. Here's an interesting story about a time-consuming costly software license audit from Microsoft and AutoDesk that could happen to any given organization at any given time. I suspect the outcome would've been much less painful had this gentleman been ...
Continue Reading... -
18 Dec 2008
My latest security content
Here's a webcast on IM/VoIP/P2P I just recorded for SearchWinIT.com:The Challenges and Solutions of Realtime CommunicationsHere are two articles I wrote for the latest issue of Security Technology & Design magazine:Mobile Security - Is anyone listening?Wireless Security: Does it still matter?Be sure to check out www.principlelogic.com/resources.html for all of my information security articles, podcast interviews, webcasts, screencasts and more....
Continue Reading... -
17 Dec 2008
What, employees exploiting the new Windows flaw???
I've been talking about (and exploiting in my internal security assessments) this very thing for a long time and it's finally reaching the "mainstream media". Never ever underestimate the intentions of rogue insiders to exploit a Windows flaw like this.It's not just this Windows exploit....It's a whole slew of them. And Metasploit's cheap and very easy to use....
Continue Reading... -
15 Dec 2008
Think of this guy as your corporate lawyer
Here's an enlightening interview with a tech-savvy lawyer, Chris Wolf, regarding data breach laws. The question posed to Chris is: what would you advise companies when it comes to data breach?In a nutshell, his response is: Get ready in advance.The $64,000 question: Would you tell your corporate lawyer no to this?...
Continue Reading... -
15 Dec 2008
A new channel for data leakage/breaches?
I just had a flashforward moment a minute ago. I was dragging and dropping a file on my Windows desktop and it "landed" on the Skype window I had open. It didn't do anything because I caught it in time but I thought: Oh no! What if I accidentally transmitted a file to someone in my phonebook? Perhaps someone that didn't need to see that file.But then I thought - ...
Continue Reading... -
12 Dec 2008
Goodbye to a number of long-time friends/colleagues
One of my best and most long-term customers, TechTarget, announced layoffs yesterday that affected a number of really good business relationships I've had over the years. I interacted with a dozen or so TechTarget employees on a weekly - sometimes daily - basis and I'm very sad to see them go.I wish the very best to the people who were laid off and also the best to TechTarget. There are ...
Continue Reading... -
11 Dec 2008
Finally a fix for the “digital divide”
Well, our people in Washington are up to it again. This time a plan for "free" broadband for Americans finally bridge the so-called gap between the Internet haves and have-nots. I thought we already had free Internet access in our local libraries but I guess that's not enough in our couch potato society. Oh, and censorship is already built into the plan - I can't fathom where it'll only go ...
Continue Reading... -
11 Dec 2008
Let this be a reminder to keep your online passwords in check
While you're shopping on Amazon.com, eBay, and elsewhere this fine holiday season, let Mike Rothman's dilemma be a reminder that we all need to take our online passwords seriously. So, keep them strong, keep them unique from one another, keep them to yourself, and (most importantly) keep them in mind. It's that long lost account that can get you....
Continue Reading... -
10 Dec 2008
Interesting new technology from Maxell
Maxell has a new technology that can analyze tape cartridges to determine if they're in good enough condition to use (and rely on) for backups. Pretty neat.Maybe this can help fill the "lack of backup testing" gap pervasive across most businesses. That is if anyone's even paying attention to their backups out there. Apparently they're not....
Continue Reading...
Resources
Client Testimonials
“A business associate referred our company to Principle Logic when we were seeking a resource to perform vulnerability /penetration testing for our external and internal networks. We found Kevin Beaver to be professional, well informed, and easy to work with. His testing did not disrupt our networks, and his progress updates were timely.
His final report was very thorough and included security recommendations for our network environment. The executive leadership was so impressed with Kevin’s security expertise, they have extended their agreement to continue to perform periodic testing. We highly recommend Kevin Beaver and Principle Logic as a resource for network security testing.”
(IT managed services firm)
I’ve written/co-written 12 books on information security including:
