Infosecurity Professional - Issue 9 - ISC

More documents

Recommendations

Info

Looking for a deal? Looking for career advice? Looking for free information? Check out the hot deals and free resources at the (ISC) 2® Market Square! Now available on the Online (ISC) 2 Resource Guide. http://resourceguide.isc2.org *** 2010 hardcopy also now available! *** Management Team Elise Yacobellis Executive Publisher 727 683-0782 n eyacobellis@isc2.org Timothy Garon Publisher 508 529-6103 n tgaron@isc2.org Marc G. Thompson Associate Publisher 703 637-4408 n mthompson@isc2.org Amanda D’Alessandro Communications Coordinator 727 785-0189 x242 adalessandro@isc2.org Sarah Bohne Director of Communications and Member Services 727 785-0189 x236 n sbohne@isc2.org Judy Livers Senior Manager of Marketing Development 727 785-0189 x239 n jlivers@isc2.org Sales Team Christa Collins Regional Sales Manager U.S. Southeast and Midwest 352 563-5264 n ccollins@isc2.org Gordon Hunt Regional Sales Manager U.S. West Coast and Asia 949 366-3192 n ghunt@isc2.org Jennifer Hunt Events Sales Manager 781 685-4667 n jhunt@isc2.org IDG Media Team Charles Lee Vice President, Custom Solutions Group Amy Freeman Project Manager n afreeman@isc2.org Anne Taylor Managing Editor n ataylor@isc2.org Kim Han Art Director Lisa Stevenson Associate Production Manager Don’t forget to take the quiz and earn CPEs: http://bit.ly/9bcmfD For a list of events (iSC) 2 is either hosting or sponsoring, visit www.isc2.org/ events ADVERTiSER inDEx CRC Press. .........................p. 4 DRII ..............................p. 16 IEEE ..............................p. 6 ISACA. ......................Back Cover (ISC) 2 .......... Inside Front Cover; p. 13; . . . . . . . . . . . . . . . . . . . . . . Inside Back Cover Norwich University .................p. 11 Nova University.. . . . . . . . . . . . . . . . . . . . . .p. 7 SCIPP ............................p. 10 For information about advertising in this publication, please contact Tim Garon at tgaron@isc2.org. 2 InfoSecurIty ProfeSSIonal ISSUE NUmBER 9
executive letter From the desk of the former (isc) 2 vice chairperson A Look at 2010's Challenges howard schmidt offers advice and areas of focus for information security professionals. Prior to taking on his new role as U.S. White House Cybersecurity Coordinator, Howard Schmidt spoke with InfoSecurity Professional about information security issues and challenges for the year ahead. There are several key issues that I think are, or should be, top of mind for information security professionals this year. One of the major problems we’re dealing with is vulnerability management. There are more vulnerabilities, usually in software, than we can possibly manage. We need to do what we can to identify and remediate these weaknesses before they are exploited, but we also need to create next-generation software to reduce the potential for vulnerabilities. Our Certified Secure Software Lifecycle Professional (CSSLP®) credential is a powerful first step toward ensuring that new software is resilient and secure. Another area of focus should be on moving the security battlefield from end users to us, the professionals. We can’t expect end users to be security experts, able to distinguish among the conflicting messages they receive. For example, we tell our colleagues not to click on suspicious links; but then they get e-mails that look to be from someone they know— perhaps a LinkedIn invitation—and those messages contain malware. We must help end users to be aware of security issues. And we need to put mechanisms in place to protect our systems and data. We’re fortunate to have a variety of operating systems and tens of thousands of applications to get work done, even on mobile devices. In this diverse environment, we have to provide consistency, protect privacy, increase security and reduce malware incidents. To do this, we must implement best practices when we build and deploy applications and systems. Strong authentication is also critical. We must move from static user identity and passwords to an environment where two-factor identity is the standard. Finally, we need to take a global view of cybercrime. International investigations must become more fluid and cooperative. We need to send a clear message that we will find, prosecute and convict cybercriminals (whose resources and abilities are better than ever and rapidly improving). We must do our best to keep the bad guys out; but if they get in, we must protect any evidence for prosecution. It will be another challenging year. I encourage you to network with your peers and share your ideas to make this world a safer place. Sincerely, Prof. Howard A. Schmidt CISSP, CSSLP, Fellow of (ISC)² Former Vice Chairperson of the (ISC)² Board of Directors issue number 9 InfoSecurity Professional 3
Page 1 and 2: issue number 9 An (ISC) 2 Digital P
Page 3: issue 9 2010 VOLUME 1 14 To view th
Page 7 and 8: (ISC) 2 MEMBER NEWS (ISC)² Hires F
Page 9 and 10: The password to your future is NSU.
Page 11: illustration by SASHIMI/theispot be
Page 14 and 15: son’s social position. “Breache
Page 16 and 17: You’ve probably developed, or are
Page 18 and 19: frankly, your enemy.” The more ti
Page 20 and 21: Each year, (ISC) 2 participates in
Page 22 and 23: global insight international inform
Page 24: The one security blanket you won’

Infosecurity Professional - Issue 9 - ISC

Create successful ePaper yourself

Delete template?

Save as template?