Translate

Total Pageviews

Monday, May 15, 2017

hit by “wannacry” (may be you deserve it) …

Guys Again a ransomware outbreak on the news. May I say I am not surprised at all? And may I say that the media coverage has been ridiculous and instead of presenting the event as something that should highlight the incompetent behaviour of managers targeted by this issue they claims about “cyberattack” which is a completely different thing. And yet people asking why? how come? how this can be possible? again really? We know that CyberSecurity is always a side though from most of the management no matter where. The proof, beside the claims from CEO, IT Managers and generally speaking CxO,...

from The Puchi Herald Magazine http://ift.tt/2ri2oF6
via IFTTT

Saturday, February 18, 2017

It is time for research to think about security and privacy

We usually talk about cyber security and privacy related to the world of industry and personal, but today I would make some points related to research in universities. how much security aware are universities? This is an interesting topics, looking at the statistics on cyber security attacks I would say security and privacy awareness is not at the first point in their needs. So bad … well first of all let’s make a little distinction: engineering vs the rest it is out of doubt that engineering universities and research are more cyber security savvy than the rest. Some of them...

from The Puchi Herald Magazine http://ift.tt/2ltRlc4
via IFTTT

Thursday, February 16, 2017

L’ingrato lavoro dell’ingrato recruiter

Era una giornata uggiosa, come sempre il perfido cercatore di lavoro (il questuante come li chiami tra colleghi) aveva inondato il mondo di curriculum vitae, ed uno era arrivato fino a te. Maledizione ti scappò di dire mentre guardavi svogliatamente la inutile quantità di informazioni di cui non ti fregava assolutamente nulla fuoriuscire da quel CV questo è uno del mestiere, mi sa anche che devo far finta di ascoltarlo ma almeno la tua pila di 2000 candidati da mostrare al tuo capo la avevi preparata, lui ti avrebbe chiesto di ridurla a 150 per mostrare che si fa screening,...

from The Puchi Herald Magazine http://ift.tt/2kMeP8N
via IFTTT

Monday, February 13, 2017

Dear CISO, please talk about business with your board, not technicality.

Antonio Ieranò CSO, Cyber Security Architect, technical evangelist, consultant, writer, journalist and trainer Dear CISO and Board I think we should always consider our job as a part of the business. We finally started to consider cyber security and data protection as a serious issue but now the question is how we evaluate a risk in our analysis and business plans… Current documentations and reports, for risk analysis, presented to most of the boards use just a flag (High, medium, low risk) but does not seems to specify any metric. Without metric it is hard to make sound evaluation and...

from The Puchi Herald Magazine http://ift.tt/2lcS80t
via IFTTT

Caro CISO, ti suggerisco di parlare d’affari con il tuo CdA, evita tecnicismi.

Caro consiglio di amministrazione e caro CISO Penso che dovremmo sempre considerare il nostro lavoro come una parte del business. Abbiamo finalmente iniziato a prendere in considerazione la sicurezza informatica e la protezione dei dati come un problema serio, ma ora la domanda è come valutare un rischio nei nostri piani di analisi e di business… Usualmente la documentazione e le relazioni per l’analisi di rischio, presentati nelle aziende (se e quando vengono presentati ovvio) si limitano, per la maggior parte, all’uso di valori generici (rischio alto, medio, basso), ma non sembra che si usi specificare qualsiasi metrica. Senza metrica è difficile...

from The Puchi Herald Magazine http://ift.tt/2lcWBQT
via IFTTT

Repost.Us