The Remediator Security Digest

March 2004

Issue 7

[ TELL A FRIEND ]

The Weakest Link: Social Engineering - "We've met the enemy, and it is us." (Pogo)

How to Keep On Keeping On

The Remediator Digest interviews Chris Karr, ÜberGuard Information
Security Consulting LLC, President - CISSP

In grade school and even in most companies on occasion, everyone is interrupted by a necessary evil, a fire drill. More often than not, people complain about how it’s a waste of time and how yucky it is outside.

[ Read More ... ]

Editorial Corner

Scary thought: Imagine your company without computing power

Think it can’t happen? Events out of your control are real - natural disasters, the California fires, earthquakes, tornadoes, hurricanes, and power outages give us pause. What would you do? Read our interview with Chris Karr to gain some insight into business continuity.

Readers weigh in on another risk mitigation practice in last issue’s security dilemma - whether or not to force patches to their end users. Also, participate in this issue's dilemma: Protecting moving targets: mobile devices and their contents.

As usual, we depend on your feedback and thank every one of you who have completed the short reader survey. It’s OK to do it again since like any sports team, players can improve or get worse with time. We want to stay on top of the game. As a bonus, your name is entered in a drawing where you could win a PAIR of Garmin Rino 110 GPS.

Best,
Meryl K. Evans
Editor

To unsubscribe instantly or change your preferences, see links at the bottom …

Reader Survey

Complete our 1-minute reader survey and you could win a PAIR of Garmin Rino 110 GPS.

Spotlight

Shavlik Technologies Adds Linux and Agent Capabilities to HFNetChkPro Patch Management Solution

by Mirko Zorz - Help Net Security

Editorial Poll

What would you like to read?

Give us your input!

Subscription

Partners

Resources

Computer Security Institute

Conferences

Security Resources

Thinking Like a Hacker

Out think them by knowing how they work from the inside out (PDF)

by Eric Schultze, Shavlik Technologies

What's Your Best Advice?

Last Issue's Security Dilemma:

To Force or Not To Force a Patch

I know a few people who work in large companies and they’ve explained their patches are automated from the network team. They don’t have to lift a finger and employees don’t have the ability to install patches on their own. However, not all of us are in such a situation as we don’t have as tight as a control over our ship. At what point do you "force" patches to your desktop users, and when do you allow them install them at their discretion? What would a policy addressing this issue look like?

- Kurt, (Company Withheld)

Read the best advice from readers of The Remediator Digest

This Issue's Security Dilemma:

Protecting moving targets: mobile devices and their contents

Mobile devices are becoming necessary tools, especially for mobile workers. Companies connect these devices to their network, syncing them with employees’ computers and company systems. We have to worry about two things: theft of the devices and securing the contents, so those who steal devices don’t access company information from them.

How do we go about addressing these two challenging areas of security?

- Vivienne O., (Company Withheld)

Can You Help?

Share your experience. You could win a Dell Digital Jukebox Music Player.
This month's winner: Rogelio Valencia Rivera, Info Tech Manager - Opnatel

The Pointy-Haired Boss

Know how to get what you need: