Focus On MSP Forum / Focus On MSP / Security

Can you be trusted? Can you prove it?

MSP Spotlight — Fri, 20 Jun 2008 11:00:42 GMT

Here is a great Blog entry regarding Trustmarks from SecurityCatalyst.

http://www.securitycatalyst.com/blog/2008/06/19/can-you-be-trusted-can-you-prove-it/

Security fire drills

Leslie — Tue, 08 Jul 2008 09:18:26 GMT

Bob Sullivan over at MSNBC wrote an interesting column about integrating psychology into computer security yesterday:

[url]http://redtape.msnbc.com/2008/07/cambridge-mass.html#posts[/url]

I thought one of the most interesting parts was the idea of a proactive "security fire drill":
[i]Imagine, for example, if once each month or so your company's IT department send a legitimate-looking e-mail with a faux virus attached. Employees who "fall" for the e-mail would get a slightly embarrassing reminder not to click on unexpected e-mail attachments. In some more critical circumstances, failure in such random tests could impact an employees' annual review or raise. In a controlled test, Acquisti said, computer users were far more likely to learn safe computing behavior from this kind of random testing than traditional memos and warnings.[/i]

Has anyone done anything along these lines? Any other ideas for drills?

Security-related Tools

MSP Spotlight — Wed, 07 May 2008 10:41:38 GMT

Time and time again I've had people ask me where they can find "security-related tools" that are publically available (and possibly FREE).

Does anybody have any suggestions as to where I can send these inquiries?

Creating and Building a Dedicated Security Team

MSP Spotlight — Wed, 07 May 2008 10:01:54 GMT

Creating and building a dedicated security team can be a challenging. It is also difficult to provide quick response to threats, susceptibility and to make risk-based priority decisions about the security situation of the company.

From your experience, what does it take to build and maintain a successful security team?