NIST Issues Draft Guidance for Securing Servers

NIST, the US National Institute of Standards and Technology, have released a draft version of their Special Publication 800-123 “Guide to General Server Security” for comments.  The document provides guidance to those wishing to ensure their servers are secure. NIST provide an invaluable range of guidance documents to help you secure your network infrastructure and […]

Internet Threat Level Increases

The SANS Internet Storm Center has raised its Infocon status to yellow.  The yellow status indicates that the ISC is “currently tracking a significant new threat. The impact is either unknown or expected to be minor to the infrastructure. However, local impact could be significant. Users are advised to take immediate specific action to contain the […]

The Three R's of Information Security

I had an interesting insight today when meeting with a customer.  We were talking about their information security challenges and she mentioned that their main concerns are what they call the “Three Rs”.  Now I have to admit that this phrase had me stumped as I have never before come across the “Three Rs of […]

April Edition of Security Watch Newsletter Now Available

The April 2008 edition of our sister publication, the Security Watch Newsletter, is now available online.  For those of you who do not subscribe to our newsletter, you may find it a useful read as we highlight issues and stories that may not be applicable to our Blog. best indie bar new york city test

Data Protection Commissioner Publishes Annual Report

The Data Protection Commissioner yesterday published his annual report for 2007.  The report is yet another compelling read and shows how our privacy is being gradually eroded in the name of commerce and the fight against serious crime and terrorism.  Indeed this is perhaps best reflected in the words of the commissioner himself “Have we not succumbed […]

Microsoft Windows XP Service Pack 3 Now Available

Microsoft has released the latest service pack for Windows XP.  Service Pack 3 includes all the updates and hot-fixes released since Service Pack 2 and also a number of new security features. most notably; “Black Hole” Router Detection, whereby Windows XP will now by default detect routers that silently discarding packets. Network Access Protection (NAP) […]

"Security Economics and the Internal Market" – Call for Comments

ENISA has extended the deadline for comments on the report “Security Economics and the Internal Market” until May 30th.  The paper is the work of Prof. Ross Anderson, Rainer Böhme, Richard Clayton and Tyler Moore (University of Cambridge, UK).  The report and guiding questions for comments can be downloaded from ENISA‘s website here. 

Latest Information Security News Roundup

Below is a round up of news stories relating to information security that we have collated from the past few days.  For ease of use we have categorised the stories under the most appropriate headings.  If there are other stories that may be of interest please let us know via the comments feature.

Call for More Companies to Certify to ISO 27001

Michael Brophy, CEO of Certification Europe, makes a strong argument for companies here in Ireland to certify against the ISO 27001 Information Security Standard, especially in light of the recent data breaches in Bank of Ireland.  Michael is quoted in both The SiliconRepublic.com and in Saturday’s Irish Independent on the frustrations he feels regarding the lack […]

Focus Ireland Annual Golf Tournament

Those of you who subscribe to BH Consulting’s monthly newsletter know that Focus Ireland are one of the charities that we support under our Corporate Social Responsibility scheme. The time of year is upon us again when Focus Ireland will be running their annual golf tournament.  This is a great event that provides lots of fun and […]