Sue Poremba

I’ve written many times about how the mobile office increases security risks, particularly via the devices that enable us to work from home or coffee shops or hotel rooms. ISACA, a leading global association for enterprise governance of IT, also sees the risks involved with mobile devices. The organization recently published a white paper, Securing […]

Data Corruption and Backups 1 | 2 | 3 | 4 | 5 | 6 How many copies of your data does the third party have? Does it use incremental backups and can it reconstruct an image of your data at a given point in the past from these partial backups? How far back do […]

Co-Location Logistics 1 | 2 | 3 | 4 | 5 | 6 What does the third-party organization do to separate information and systems? Could your competitor, who is also using the service, get its hands on your data? Remember that, in the cloud, you cannot tell whether your data is copied. So you really […]

Data Loss 1 | 2 | 3 | 4 | 5 | 6 You need to ask your cloud service provider what its data-protection policy is and what its audit procedures are. And then you should perform due diligence on those procedures. It’s vital to employ a carefully defined risk analysis of IT systems and […]

Perform regular source code reviews and vulnerability assessments 1 | 2 | 3 | 4 | 5 | 6 As internal users were trusted, the application had not been exposed to such things like security source code reviews or security vulnerability tests in general. Challenges: The challenges mentioned up until now are common issues noted […]

Implement secure communications channels 1 | 2 | 3 | 4 | 5 | 6 Internally, the application had only trusted users, and all communication was trusted in the sense that all other users were �no security risk.” Challenge: There is a variety of typical Web application vulnerabilities that target communication problems, for example, insecure […]

Develop solid, secure user management 1 | 2 | 3 | 4 | 5 | 6 Internally, the application had only trusted users. Often, internal authentication services, such as LDAP and Microsoft Active Directory, are based on protected internal databases and used for secure user access and logging of user traffic. Challenge: If there has […]

Rank each of the statements below to the best of your knowledge. 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 Little consensus on most key points. In the rush to virtualization, security isn’t keeping pace. A survey by Prism Microsystems found inadequate budgets for security, poor […]

Which of the following are security concerns for you when it comes to virtualization? (Multiple selections allowed) 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 Hypervisor is the biggest worry. In the rush to virtualization, security isn’t keeping pace. A survey by Prism Microsystems found inadequate […]

Which of the following have you implemented for the various layers of the virtual environment? 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 Event tracking in the virtual world is lagging. In the rush to virtualization, security isn’t keeping pace. A survey by Prism Microsystems found […]

How are you securing your virtual environment? 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 Traditional security measures still topping the list. In the rush to virtualization, security isn’t keeping pace. A survey by Prism Microsystems found inadequate budgets for security, poor hypervisor controls and low […]

What percentage of your production servers do you expect to virtualize by the end of 2011? 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 Deployments predicted to grow rapidly. In the rush to virtualization, security isn’t keeping pace. A survey by Prism Microsystems found inadequate budgets […]