ISACA To Update IS Audit And Assurance Standards

ISACA, who offer the well-known Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT) and Certified in Risk and Information Systems Control (CRISC) certifications, have announced the introduction of revised Information Systems (IS) Audit and Assurance Standards. The new standards have been restructured in order to yield […]

A Call to Arms for Infosec Pros

My latest article for Help Net Security magazine is now online. In this piece I highlight how the lack fo leadership in the information security industry will cause us a lot of problems and ask that we all do what we can to address this problem. You can read the piece here.

ISO 27001 Breakfast Seminar

Ensuring your systems remain secure is an ongoing challenge for every business, even more so in the current business climate where budgets have remained static or cut.  So how can you get more bang for your infosec euro?  BH Consulting and Certification Europe are partnering to host a breakfast seminar on November 22nd at 8:00 […]

"ISO 27001 In A Windows Environment" Book of the Year Award

I was pleasantly chuffed to find out at Infosecearlier this year that my book “ISO 27001 In a Windows Environment” came runner up in the IT Governance Book of The Year Award. The awards were based on a combination of the number of copies sold and the votes received in an online poll. Thank you […]

Everything You Wanted to Know About Infosec But Were Afraid To Ask

Ever have a question on information security but did not have the opportunity or facility to ask someone that question?  Well you will have that chance next week at the Infosecurity Europe in London.  The publisher of my book “ISO 27001 In A Windows Enviroment“, IT Governance, are hosting an “Ask the Expert” session on […]

Why Use the ISO 27001:2005 Information Security Standard?

The recent security breaches on the Fine Gael and DUP websites has once more brought information security to the fore with extensive coverage of both incidents in the media.  One of the questions I keep getting asked after such incidents is “how to I ensure my company is secure?”.  Making your company, or website, secure […]

September Meeting of the Irish Information Security Forum

The next meeting of the Irish Information Security Forum will be held on the 30th of September at 14:00 in Buswells Hotel on Molesworth St. Dublin 2.  The topic for the meeting will be “An Overview of Data Loss Prevention”.  This will then be followed by a case study of a real-life implementation of Data Loss Prevention technology. […]

ISO 27001 In a Windows Environment

I am delighted to see that the revised version of my book has now been released.  The book is “ISO 27001 In a Windows Environment” and has been revised to include the security features in Microsoft’s Windows 7 operating system. It is available to buy from the IT Governance’s website.    As the overview on the […]

Implementing ISO 27001 in the Real World

 SC Magazine UK recently published an article I wrote on “Implementing ISO 27001 in the Real World” on their blog today.   The article is an interview with three people who have experience in implementing and achieving certification against the ISO 27001:2005 Information Security Standard in organisations.  The people who kindly agreed to be interviewed were; […]