Network Security Consulting Blog

I read with interest a news item based on a study performed by the University of California at Berkeley’s Center for Law and Technology. This study’s findings show which US financial institutions, retail merchants, and utilities have the most complaints concerning identity theft incidents. Bank of American was first, AT&T was second, Sprint/Nextel was third, JPMorgan Chase came in fourth, and Capital One was fifth. Read more…

As I said in my previous blog entry, information security governance has provided a revolutionary new approach to information security and, in particular, information security management. The governance approach has been one of the main causes for the field of information security moving from what Donn Parker once called a “folk art” to a profession that is becoming increasingly influential and respected. At the same time, however, information security governance is by no means a panacea. There are a number of inherent limitations to this approach that need to be understood if it is to be used wisely and productively in different situations and settings. Read more…