Filtering for Spam

While presenting about phishing and spam in a corporate setting I realized some people don’t know how to configure a handy filtering trick. I use this filter in one way but you may find a different, equally valuable use.  One reason this is so powerful for me is that I have a LOT of email… Continue reading Filtering for Spam

Creatively Exposing Your Business to Risk

There are many ways a business can be exposed to risks and some of them can seem like great ideas. While I visiting a retail location recently, I noticed this sign.     The agency’s commitment to resource conservation is commendable and their creative approach seems to empower all customers while lowering the social bar… Continue reading Creatively Exposing Your Business to Risk

FedRAMP Status

  Over three years into the program that allows US government agencies to use Cloud Service Providers (CSPs), there are 75 authorized products. Most federal agencies currently use five or less of the authorized cloud offerings, other agencies use these offerings extensively. The top five agencies with the most authorizations are: Department of Defense – 37 authorizations Department… Continue reading FedRAMP Status

Managing Passwords, Securely

I recently wrote about the desire, by many, to see the death of passwords.  All negatives considered, if passwords go away, it won’t be because people don’t like them but because they lose their efficacy and cost proposition (they’re effectively free, transportable, satisfy the “something you know” criteria, and they’re easy to replace). After that… Continue reading Managing Passwords, Securely

Triange InfoSec Conference 2016

The Raleigh ISSA is hosting the annual Triangle InfoSecCon this Friday, Oct 21.  The event has a lot of content for the day and is a great investment in an infosec profession for those looking to learn and those who want to capture some conference hours before the end of the year. There are nine… Continue reading Triange InfoSec Conference 2016