Sum Sum Summertime!
The calendar says its Summer although here in the Pacific Northwest, we’re not sure ~ its a cool Summer, which makes it fine for reading security books in the hammock or doing laptop stuff from the deck.
So what’s cooking? I re-encountered a tool I first learned about from Russ McRee’s Toolsmith column in the September 2008 ISSA Journal ~ Practical Threat Analysis. I’d looked at it before, but not in enough detail so have embarked on using it for a deeper understanding.
The 2010 Verizon Data Breach Investigations Report is out and its chock-full of good statistics and commentary. I especially like the partnership with the U.S. Secret Service and the shared incident data. Another nice tool from Verizon Business is VerIS, the Verizon Incident Sharing Framework which presents how metrics are captured and used in preparation of the DBIR.
I took the Certified Information Systems Auditor (CISA) exam on June 12, 2010 and am patiently waiting to learn my fortune or fate! The process stimulated a new appreciation of ISACA Auditing Standards, Procedures and Guidelines and CobiT 4.1, prompting me to send the former to FedEx for printing and to order the latter in book form from the ISACA Bookstore. My wife picks it up and says “Can’t you find a good novel to read? Its Summer!”
I guess you had to be there to appreciate it…
Cheers mates!
by Bill Wildprett, Suspicious Minds blog, Copyright 2010
*** This is a Security Bloggers Network syndicated blog from Suspicious Minds authored by Bill Wildprett. Read the original post at: https://suspiciousminds.wordpress.com/2010/07/09/sum-sum-summertime/
