PRO+ Premium Content/Information Security magazine

Features in this issue

• PDF download: Information Security magazine November 2012

  by  Information Security magazine staff

  In this issue, find out who won this year’s Security 7 Award, Also, we examine the pros and cons of the Metasploit penetration testing framework.

• Old Application Vulnerabilities, Misconfigurations Continue to Haunt

  by  Robert Westervelt

  Flaws in legacy applications and configuration blunders still plague organizations, experts say.

• Information Security Decisions: From Dogma to Data

  by  Wade Baker

  The information security field needs to overcome information sharing roadblocks to improve decision making.

• Developing a BYOD Strategy: Weigh the Risks, Challenges and Benefits

  by  Krishnan Chellakari

  Organizations need to consider benefits and risks as they embrace BYOD.

• Security Warrior for Cloud Transparency

  by  Jim Reavis

  Ron Knode, who passed away earlier this year, was a tireless advocate for cloud security transparency.

• GRC Management and Critical Infrastructure Protection

  by  Doug Powell

  GRC needs to adapt to become a truly effective risk management tool for critical infrastructure.

• Security Risk Assessment Process a Team Effort at Notre Dame

  by  David Seidl

  The university created a committee to tackle risk assessment on an ongoing basis.

• FISMA Compliance and the Evolution to Continuous Monitoring

  by  John Streufert

  The U.S. Department of State developed a system for improving federal cybersecurity.

• The new era of big data security analytics

  by  Preston Wood

  The information security industry needs to shift its focus to data-driven security.

• Metasploit Review: Ten Years Later, Are We Any More Secure?

  by  George V. Hulme

  Some say the pen testing framework is a critical tool for improving enterprise security, while others say it helps attackers.

• Cloud Compliance: Tackling Compliance in the Cloud

  by  Davi Ottenheimer

  Moving to a cloud environment brings compliance challenges, but they’re not insurmountable.