Information Security Blog

Eggs, Bagels, & ISO 27001

Last week I spoke to a group of senior Information Security professionals at the CSO Breakfast Club Event held in Philadelphia PA. The topic ‘Data Protection‘ was chosen specifically by the CSO Breakfast Club’s founder, William Sieglein, ‘to focus on the challenges our executive members face in trying to decide what data requires protection, where that data resides and how best to protect that data in a cost-effective manner.’

The meeting ended up as a spirited discussion of the challenges of securing data and determining which point solutions are best to address the most vexing issues. I recommended that they consider ISO 27001, as short of divine intervention, there is no ‘silver bullet’ for data protection. So having a ‘road map’ (like ISO 27001) is more and more critical. I think that the 6K+ companies that have been certified over the last few years are a testament to the challenges we all face and the value of a road-map.

The benefits of 27001 are numerous but can be simplified to:

It is a certifiable standard (you can prove you are secure to a known set of criteria).
It simplifies information security into an overarching process (27001) and best practices (27002). No need to reinvent the wheel when thousands of folks have developed and vetted an approach and collection of controls.
There is not a lot of new ground to learn – it is largely comprised of activities you are familiar with and your current control environment can easily be migrated into a 27001 ISMS.

Best Practices for Firing A Network Security Administrator

Want to know how to fire a Network Admin? Need to know what precautions to take? Firing any employee can be a stressful event. Firing one who has significant knowledge of and privileged access to your Information Technology/Security infrastructure is even more stressful, as the risks are so notable.

Download: Information Security Attestation Guide

A Best-Practices Guide to Information Security Attestation

Download our proven Information Security Guide to simplify the process of protecting your data, proving you’re secure and growing your business.

Free Download: ISO 27001 Implementation Roadmap

Have no fear – our “roadmap” will guide you, step by step, through the entire ISO 27001 process.

Getting to ISO 27001 certification is a process made up of things you already know – and things you may already be doing!

Free Download: A Best Practices Guide to Database Security

Because data is only as secure as the systems & processes it relies on – a holistic approach to data security is essential. This roadmap is not meant to be exhaustive but rather to stimulate the necessary thought process to put you on the path to good data security.

Free Whitepaper: Stop Wasting Money on Penetration Testing

Penetration Testing is most frequently performed to:

Substantiate the net effectiveness of a mature control environment
Prove to a third party that an environment is secure/trustworthy
Quickly assess the security of a less mature control environment (in a sense a technical risk assessment)
To validate that significant changes did not have unanticipated results