Tag Archives: security

Team Wins $50K, Restores 5 Shredded DARPA Docs in 33 Days

You shred an important document, it stays deleted forever. Right?

As it turns it, it took the eight members of team “All Your Shreds Belong to U.S.” only 33 days to piece together more than 10,000 shredded pieces of paper, split across five puzzles

via Team Wins $50K, Restores 5 Shredded DARPA Docs in 33 Days | News & Opinion | PCMag.com.

#PCI Compliance Concerns Driving Adoption of Encryption

According to a survey recently unveiled by the Ponemon Institute, a new factor is driving adoption of encryption technologies by merchants. For the first time in the six years of the U.S. Enterprise Encryption Trends survey, more businesses emphasized the meeting of PCI DSS requirements as a factor for adopting encryption technology. Previously the primary motivation to adopt data security technologies was to protect against security breaches.

via PCI Compliance Concerns Driving Adoption of Encryption.

If Not The PCI Standards, Then What? « PCI Guru

Frustrated, I asked the participants at my last meeting, “If not the PCI standards, then what standard do you want to follow to ensure the security of cardholder data?”  Roaring silence.

via If Not The PCI Standards, Then What? « PCI Guru.

NIST budget request could bolster cybersecurity initiatives — Federal Computer Week

In its fiscal 2012 budget, the Obama Administration requested the National Institute of Standards and Technology’s receive $43.4 million for cybersecurity programs, an increase that would more than double the funding for NIST research and development programs in this area, according to NIST officials.

via NIST budget request could bolster cybersecurity initiatives — Federal Computer Week.

More than 6M affected since HIPAA breach notification rule

Electronically protected health information (ePHI) has become a target for malicious attack, according to a recent report by Redspin, Inc., a provider of HIPAA risk analysis and IT security assessment services. The report was conducted between August 2009– when the HITECH breach notification interim final rule (IFR) went into effect—and the end of 2010.

via Report: More than 6M affected since breach notification rule.

Cost of regulatory security compliance? On average, $3.5M – CSO Online – Security and Risk

The cost of achieving regulatory security compliance is on average $3.5 million each year, according to a survey of 160 individuals leading the IT, privacy and audit efforts at 46 multinational organizations

via Cost of regulatory security compliance? On average, $3.5M – CSO Online – Security and Risk.

Nominations Open for PCI Board

The PCI Security Standards Council (PCI SSC), which oversees the PCI (Payment Card Industry) Data Security Standard that card-accepting retailers must follow, today announced that nominations for election to the 2011-2013 PCI SSC board of advisors are now being accepted

via Nominations Open for PCI Board.

Half of federal Web sites fail DNS security test

Half of U.S. government Web sites are vulnerable to commonplace DNS attacks because they haven’t deployed a new authentication mechanism that was mandated in 2008, a new study shows.

via Half of federal Web sites fail DNS security test.

Cyber bill would reform FISMA, instate new DHS agency and appoint White House-level authority

A controversial Internet security bill proposed in 2010 by Sen. Joe Lieberman (I-Conn.) could yet become law in the current session of Congress, said Jeff Greene, counsel on the majority staff of the Senate Homeland Security and Governmental Affairs Committee.

via Cyber bill would reform FISMA, instate new DHS agency and appoint White House-level authority – FierceGovernmentIT.

Dell To Acquire Secureworks

Dell today announced it has signed a definitive agreement to acquire SecureWorks® Inc., a globally recognized provider of information-security services. SecureWorks’ industry leading Security-as-a-Service solutions include Managed-Security Services, Security and Risk Consulting Services and Threat Intelligence. The acquisition expands Dell’s global IT-as-a-Service offerings and information security expertise.

via Dell To Acquire Secureworks | Dell.