How CISOs can communicate risk to businesses

How CISOs can communicate risk to businesses:

CISOs have been hearing for some time now that they need to learn how to “speak the language of business” better. It is one way to gain respect and avoid being viewed mainly as a scapegoat.

For those wondering how the heck to do that, Chris Wysopal, cofounder and CTO of Veracode, is glad you asked.

That was the focus of Wysopal’s presentation titled, “A CISO’s Perspective on Talking to the Board about Cybersecurity,” Tuesday morning at RSA 2015 in San Francisco.

The first step, he said, is learning to think like a business leader instead of, “someone who is managing back-office technology.”

To read this article in full or to leave a comment, please click here

Original enclosures:

RSA chief to security pros: Stop addressing the wrong problems

RSA chief to security pros: Stop addressing the wrong problems:

IT pros need to stop using old frameworks for addressing security and deal with today’s reality because the old view of security is no longer useful, attendees at the RSA Conference 2015 in Las Vegas were told on Tuesday.

It is as if security pros are explorers who have reached the farthest reaches of their known world, said RSA President Amit Yoran during his keynote address.

+ ALSO ON NETWORK WORLD Hot security products at RSA 2015 +

“We have sailed off the map, my friends,” Yoran says. “Sitting here and awaiting instructions? Not an option. And neither is what we’ve been doing – continuing to sail on with our existing maps even though the world has changed.” He laid out a five-point plan for security executives to start addressing the right problems.

To read this article in full or to leave a comment, please click here

Original enclosures:

So long, Pantech! South Korean phone maker will probably throw in the towel in the coming months

So long, Pantech! South Korean phone maker will probably throw in the towel in the coming months:

Pantech, the third-largest smartphone maker in South Korea, will most certainly cease to exist next month, as nobody bought the smartphone slinger in the specified by court time period.

As a refresher, Pantech was up for grabs after the company scored a number of disastrous financial quarters and the losses it accumulated, the growing debt (roughly $475 million according as well as the non-existent profitability forced the company to put itself on the market. Interested parties could express their desire to acquire the manufacturer until April 17.  From the looks of ...

RSA Conference 2015: Criminals targeting gaps in user awareness training

RSA Conference 2015: Criminals targeting gaps in user awareness training: The more things change...

Image by Thinkstock

Using data gathered from their own customers, Proofpoint, a Security-as-a-Service provider in Sunnyvale, California, says that while awareness training is working, criminals are still able to obtain a high degree of success in their Phishing campaigns.

The company published their findings in a report released on Wednesday during the RSA Conference in San Francisco.

To read this article in full or to leave a comment, please click here

Original enclosures:

Here's What a $400 Laptop Looks Like This Year

Here's What a $400 Laptop Looks Like This Year:

Cheap laptops are getting better every year. The $200 HP Stream 11 is a perfect example of that . What do you get for a couple extra $100 bills? The new 11-inch Pavilion x360. It’s a sleek backflipping laptop/tablet hybrid that sounds like surprising value for the money.

Read more...

RSAC 2015: RSA Conference (Day 2)

RSAC 2015: RSA Conference (Day 2):

Day two officially marks the start of RSAC. Now that the show floor is open for business - the talks are underway and the halls are starting to hum with conversation as attendees move from place to place.

Most of my morning / afternoon will consist of briefings and one-on-one meetings, but I wanted to start the day with a themed discussion. Please feel free to leave your thoughts on the topic in the comments section below.

The theme is Shadow IT, and today I’ll be posting Q&As with executives on this topic. The interviews were conducted before the conference started, but the comments given on the record make for a good icebreaker.

Shadow IT sounds scary, but it's not. These days, the bulk of an organization's data already exists on a network maintained by an approved SaaS vendor.

To read this article in full or to leave a comment, please click here

Original enclosures:

RSAC 2015: RSA Conference (Day 1)

RSAC 2015: RSA Conference (Day 1):

Monday here at the show, as I've written before, is quiet. As far as RSAC is concerned, the only people here really are the vendors and their staff, a few press and analyst types, conference organizers, and the workers putting the expo hall together. I've always thought of this day as the calm before the storm.

RSAC isn't a hacker conference; it's a business conference. It's been around since 1991, and has grown quite a bit since then. Last year, nearly 30,000 people attended, along with more than 350 vendors.

Each year, RSAC has a conference theme (this year's theme is to challenge today's security thinking), but most of the talks and floor discussions center on events that happened over the previous twelve months.

To read this article in full or to leave a comment, please click here

Original enclosures: