Sue Poremba

Seven Data and Information Security Mistakes Even Smart Companies Make “Security is not baked into the technologies.” I wish I had a dollar for every time a security expert said that or something similar to me as we lamented about how difficult good cybersecurity is to maintain. The problem, they have repeatedly told me, is […]

Five Tips to Prepare Your Business for PCI DSS 3.0 An announcement was made today that victims of the Target breach could get up to $10,000 as part of a class-action settlement. Okay, chances are slim that the average person affected will see even $10 from Target, let alone $10,000, but this is yet another […]

Seven Data and Information Security Mistakes Even Smart Companies Make It seems like the breach cycle goes in full circles. When data breaches began to make the news, the health care industry was hardest hit. Eventually, attacks against the health care industry, while they didn’t disappear, moved off the headlines in order to make room […]

Top 10 Tips for Educating Employees About Cybersecurity Although my team isn’t playing in the tournament, and I’m really not much of a basketball fan, I do realize we’re in the midst of March Madness. I suspect I will be like millions of others who will log on to sports sites to check the scores […]

Beyond Protection: Security as a Business Enabler If you are the IT person who handles security for your company, where do you feel the most pressure when it comes to protecting business interests and consumer privacy? The folks at Trustwave sought to discover what was causing the most stress and concerns for IT and security […]

AV-TEST Identifies the 10 Best Security Products of 2014 At the end of last week, I started getting email messages warning me about the latest TLS/SSL vulnerability that has been discovered. This one is called the FREAK Attack and a site dedicated to informing users about the attack describes this new vulnerability in this way: […]

AV-TEST Identifies the 10 Best Security Products of 2014 In late December, I warned that third-party risks would be an issue that we had to watch in 2015, and quoted a statement from Steve Durbin, managing director of the Information Security Forum, about this topic. A newly released study from Forrester and BitSight Technologies found […]

Listen Up CIOs and CISOs: Are You Ready for What’s Coming? Have you given much thought to how the Internet of Things (IoT) is affecting your overall security? If not, it might be time to consider an IoT section to your cybersecurity policy. As Steve Durbin, managing director of the Information Security Forum, said to […]

Top 10 Tips for Educating Employees About Cybersecurity Last month, thousands of corporate leaders from all over the world and from all types of industries met in Switzerland for the World Economic Forum. While there, they discussed a wide range of topics, including cybersecurity. As the National Cybersecurity Institute blog pointed out: All agreed that […]

Five Cyber Attacks that Made CISOs Rethink Security Phishing scams have been around for a long time. Just when you think that you have figured out the difference between a phishing email and the real thing, the spammers go in a new direction with trickier and harder-to-discern cons. But now they may have stumbled on […]

Top 10 Tips for Educating Employees About Cybersecurity One of the new cybersecurity initiatives being championed by President Obama is the Personal Data Notification & Protection Act, which will create federal standards for breach notification. I’ve long thought this act was overdue. With even the smallest companies able to conduct business transactions nationally and internationally, […]

Tips for Securing Data in a Mobile World I recently had a conversation with someone about BYOD and security. He told me that he thought that enterprise was having BYOD fatigue and there was a growing attitude that its security problems were overblown. This person wasn’t alone in his feelings. I had read some articles […]