Identity Management — News

The week in security: Identity, telecoms, biometrics drive government security vision

Although there was controversy around government plans to increase biometric information-gathering a Australian entry ports, others felt that Australian government agencies were showing “inspiring” traction in formalising their identity-management infrastructures, while UK and US government agencies were taking off on a slightly different tack after being said to have attacked security software that they felt was thwarting their work in intelligence gathering.

David Braue | 29 Jun | Read more

ISO/IEC 27001:2013 – what’s new?

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organisation. It was recently updated and Dr. Angelika Plate formerly of the German Information Security Agency and now an independent consultant, walked through the changes at AusCERT 20

Anthony Caruana | 04 Jun | Read more

Channel growth a key focus for Webroot's new Asia-Pacific head

A strengthened focus on channel partners and the capitalisation of recent technology acquisitions will fuel a redoubled assault on the Asia-Pacific endpoint security market as Webroot's newly appointed APAC regional managing director, Robbie Upcroft, settles into his new role as steward of an ever-harder battle against the growing tide of malware actors.

David Braue | 06 May | Read more

Don't give up on the security fight just yet

Many companies are coming to see security as a form of damage control rather than prevention – an implicit admission that cybercriminals have outflanked and outclassed them – but one security innovator is still working hard to convince customers not to give up on the idea that attacks can still be prevented.

David Braue | 29 Apr | Read more

The week in security: Google fights app malware, long-term PCI compliance plummets

Government requests for Facebook continued to grow in the second half of 2014, the company's latest transparency report has confirmed. And, speaking of transparency, some vendors were worried by findings by Verizon that 80 percent of PCI DSS-compliant firms fail to stay compliant in the year after their certifications – leading some to push the PCI Council to accept software-based encryption]] as well as the current hardware-based encryption it requires.

David Braue | 23 Mar | Read more

The human firewall has a soft spot: you

For all the talk about the importance of new security technologies, the importance of staff buying into corporate security strategies is often underestimated. In every case, the predictable result is the same: a strong technological barrier whose effectiveness is immediately compromised once a legitimate user, with legitimate access to internal resources, clicks on a phishing email designed to load malware onto their computer.

David Braue | 12 Mar | Read more