How to secure your company

Monday, 30 June 2003, 10:23 AM EST

There's no one thing a company can do to be secure. First, every company is unique; what works well for one might not work for another. Second, there's no such thing as 100% security; companies can do things to reduce and manage risk, but they can never eliminate it. Third, companies are constantly changing; just because a company is secure today doesn't mean it will be secure tomorrow.

It's also true that a company can do many things to not be secure. For example, most companies are very good at not implementing proper security. But instead of telling you the wrong ways things can be done, I'm going to focus on some general principles, which, if religiously followed, will enable most companies to attain a reasonable level of security.

Let's examine the following four core principles and see how they can be applied:

- Know thy system
- Principle of least privilege
- Defense in depth
- Prevention is ideal, but detection is a must

[ Read more ]


How to talk infosec with kids

Posted on 17 September 2014.  |  It's never too early to talk infosec with kids: you simply need the right story. In fact, as cyber professionals itís our duty to teach ALL the kids in our life about technology. If we are to make an impact, we must remember that children needed to be taught about technology on their terms.

Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.

Daily digest

Receive a daily digest of the latest security news.


Thu, Sep 18th