Access "Should enterprises give in to IT consumerization at the expense of security?"
This article is part of the September 2010 issue of 2010 Security Readers' Choice Awards
Point: Marcus Ranum Some companies are apparently adopting a policy of allowing employees to do their computing work on personal devices -- a trend that, I suspect, is a result of mainstream IT departments not being quite sure how to accommodate their growing user-base of Apple Computer addicts. Our industry appears to be of two minds about this topic: on one hand, we're worried about data leakage; and on the other, we take steps to make said leakage as easy as possible. I was on a conference call last week, in which a senior technical executive asked me if I had any suggestions for what kind of data leakage system could be put between their Exchange server and their BlackBerry users to detect and block attempts to export sensitive data. As our conversation continued, he said, "Of course, these are corporate-issued BlackBerries. So at least we can do remote-wipe in case of loss." I was struck dumb for a second, trying to sort through the inherent contradiction in simultaneously giving employees a tool for exporting data from the safety of the corporate WAN, ... Access >>>
Premium Content for Free.
2010 Information Security magazine Readers' Choice Awards
For the fifth consecutive year, Information Security readers voted to determine the best security products. Nearly 1,500 voters participated this year, rating products in 14 different categories.
PCI update could mean clarity or confusion
What you can expect from this fall's update to the Payment Card Industry Data Security Standard.
- 2010 Information Security magazine Readers' Choice Awards
Web 2.0 security threats and how to defend against them
by David Sherry
The collaborative nature of Web 2.0 introduces myriad threats to data that must be proactively countered.
Internet privacy tools only go so far
Tools help protect privacy but safeguarding personal data in the age of Google and Facebook is getting harder.
- Web 2.0 security threats and how to defend against them by David Sherry
Intel acquision of McAfee a head-scratcher
Embedding security in hardware isn't new, but is it worth an $8 billion investment? Time will tell on the Intel-McAfee acquisition.
How to develop a data breach response strategy
by Kim Getgen and John W. Woods
Targeted attacks on corporations and their crown jewels have become routine. Companies need to be prepared.
Should enterprises give in to IT consumerization at the expense of security?
Bruce Schneier and Marcus Ranum debate the risks associated with employees using personal computing devices.
- Intel acquision of McAfee a head-scratcher
More Premium Content Accessible For Free
Continuous monitoring program demystified
For many security teams, "continuous monitoring" is a vague concept associated with FISMA compliance. A continuous monitoring program can be simple ...
Does Windows 8.1 meet the demands of the BYOD age?
The variety and sheer number of network endpoints, users and devices in the enterprise today is driving IT's demands for enhanced security features ...
Application security policy after Heartbleed
Enterprises leverage open source software for the perceived quality of the code, but the Heartbleed flaw has made many question their use of ...