SEARCH RESULTS
 
Showing 1-10 of 19 records
 
Expand article

US Government planning to spend 10% of its IT budget on cyber-security by 2009.

2008-02-25 13:59:58 by Khalid Kark in Security & Risk Management
 
...DOD and DHS have increased nominally. I think, that makes sense. DOD and DHS have been spending on cyber-security before we even knew what it was. They have mature security postures and dont need a lot of catching up 4. You have to ensure a healthy balance between new initiatives and maintaining existing ones . The government is spending more...
 
Tags: cyber-security, budget, cyber-security budget, security, government, measure security, security budgets, mature security postures, government infrastructure
 
 
 
 
Expand article

Security Certification Rules Could Shake Up IT Mgmt

The Article has images
2008-06-26 12:33:17 by Dave Lewis in Liquidmatrix Security Digest
...DODs Directive 8570 on information assurance, approved in December 2005, requires all of the departments information assurance workers to obtain an accredited commercial certification in computer security. DOD has approved 13 certifications for the directive The DOD requirement already has thrown what one conference attendee called a giant...
 
Tags: cissp cert, cissp, cissp certification requires, requires, market, security manpower market, giant monkey wrench, dod requirement, establish minimum requirements
 
 
 
 
Expand article

NISTS FISMA Pase IIWho Certifies Those who Certify the Certifiers?

2008-06-17 21:22:09 by rybolov in The Guerilla CISO
 
...DoD 8570.1M follows this approach. Individual-level certification would be CAP, CISSP, CG.*, CISA, etc. The company-level certification would be something like ITIL or CMMI Second-PartyCredentialing: The industry creates a new certification program to satisfy NISTs need without any input from NIST. Part of this has already happened with some...
 
Tags: services, boutique services, risk, risk-avoidance cultures, accreditation services, company-level certification, security risk, certification, certification program
 
 
 
 
Expand article

The Keys to the Pentagon Are in the Parking Lot

2008-12-07 16:23:23 by Editor in Cheap Hack
 
...DoD computers by dropping them in the parking lot. Employees picked them up and brought them in to try to see who owned them, but at that point it's already too late. Autoplay runs the attack code, system is 0wned. Maybe it's true, maybe not, but it would be a good enough reason for DoD to ban such devices altogether
 
Tags: pentagon, usb keys, dod, dod computers, lot, autoplay runs, gadi evron, completely false, attack code
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...DoD as well as log management and platform vendors. Burton Group held a conference call discussing common event standards and SIEM with members of the International Information Integrity Institute (I-4), and key stakeholders showed up. The Open Group reports that enterprises as well as vendors are getting involved with XDAS. Clearly,...
 
Tags: common event standard, standard, event standards space, space, standards, common event standards, standards deliberation, cee, cee web site
 
 
 
 
Expand article

Prospects Brightening for a Common Event Standard

2008-02-25 08:38:57 by Burton Group in Security and Risk Management Strategies Blog
 
...DoD as well as log management and platform vendors. Burton Group held a conference call discussing common event standards and SIEM with members of the International Information Integrity Institute (I-4), and key stakeholders showed up. The Open Group reports that enterprises as well as vendors are getting involved with XDAS. Clearly,...
 
Tags: common event standard, standard, event standards space, space, standards, common event standards, standards deliberation, cee, cee web site
 
 
 
 
Expand article

The Federal government is a leader in NAC adoption

2008-04-09 10:53:43 by HASH0x8745d18 in StillSecure, After All These Years
 
...DoD and the armed forces about what they have been doing around NAC. Go talk to DISA about NAC deployments. Speak to Homeland Security, FCC, Transportation, USDA or any number of other federal agencies who have been looking at and using NAC for years already and than try to tell me that the Feds are lagging on NAC adoption. Go ask Cisco how...
 
Tags: nac, nac adoption, adoption, nac deployments, real nac presence, federal government, nac standards, federal space, federal space screams
 
 
 
 
Expand article

Stealth Fighter's Secrets are Safe, Contractor Insists

2008-05-02 15:30:00 by Danger Room in Wired Security
 
A DoD study reported exclusively by Danger Room Thursday alleges that "the advanced aviation and weapons technology for the JSF program may have been compromised." Not so says defense contractor BAE Systems. "There is no basis whatsoever for that conclusion
 
Tags: thursday alleges, basis whatsoever, weapons technology, dod study, jsf program, danger, conclusion, exclusively, aviation
 
 
 
 
Expand article

FBI worried as DoD sold counterfeit networking gear

2008-05-09 00:00:00 by HASH0x847373c in Network World on Security
 
The U.S. Federal Bureau of Investigation is taking the issue of counterfeit Cisco equipment very seriously, according to a leaked FBI presentation that underscores problems in the Cisco supply chain
 
Tags: cisco supply chain, counterfeit cisco equipment, fbi presentation, federal bureau, underscores, investigation, issue