November 19, 2013 | Patrick Bass

PCI DSS v3.0: What’s new and some key recommendations

On November 7, the Payment Card Industry (PCI) updated security requirements for handling credit card numbers and related data. The updated Data Security Standard (DSS) 3.0 reflects a number of key changes important to any organization that stores, processes, or transmits cardholder data (CHD). The new requirements become effective January 1, 2014. The older 2.0 standard will remain active until December 31, 2014 to help ensure adequate…

November 11, 2013 | Lauren Barraco

Log Analysis 101

The challenge for any security practitioner is the same: how to get adequate security visibility for your organization. Securing your environment requires an understanding of the current and evolving threat landscape as well as knowledge of network technology and system design. The traditional approach to event log analysis says “collect logs from everything connected to the network and let…

November 6, 2013 | Sandy Hawke

Top Five Myths About Log Management

Event logs provide all the information you need to troubleshoot operational errors, and investigate potential security exposures. They are literally the bread crumbs of the IT world. But as you're likely aware, finding the insight you need inside those scattered bread crumbs, isn't all that straightforward. Thankfully, there are some useful technologies that can assist with bringing together…

November 4, 2013 | Sandy Hawke

Five Common Security Mistakes and How to Detect Them

We’ve all made mistakes. And the best we can hope for is that we learn from them. Unfortunately, IT security mistakes can often have much more wide-ranging consequences than your standard mistake like a missed typo in a press release or a forgotten name of a new colleague. That’s why it’s so critical to…

November 4, 2013 | Sandy Hawke

Welcome to Security Essentials

"Simplicity is the ultimate sophistication." --Leonardo Da Vinci Let's face it. Information security is complicated and the industry - as a whole - hasn't done much to simplify it. In simplifying it, I'm convinced we'd be better at it.For the past few decades, I've had a hard time in cocktail party conversations. When someone…