Risk Management with Stuart King and Duncan Hart

January 2007

  • Another unstructured blog

    Stuart King - Reed Elsevier 08 Jan 2007
  • According to this blog, http://blog.casescontact.org/ , the following is true of a typical information security blog: ..the archetypal information security blog favors: a) instant response over ...

  • A matter of life and death

    Stuart King - Reed Elsevier 08 Jan 2007
  • ...too much coffee, resulting insomnia, eventual madness and finally death...ok, ok, I'm being flippant - it's a serious matter. But you've got to laugh

  • Show me the evidence

    Stuart King - Reed Elsevier 06 Jan 2007
  • I came across this gem of advertising here: http://www.cioview.com/products/ISECOM_landing.html "According to the University of Texas School of Management, security incidents could cost your ...

  • PCI makes for "Superior Security"

    Stuart King - Reed Elsevier 05 Jan 2007
  • PCI compliance is important, and not just for the sake of protecting credit card data. It's a simple security standard that we should all be able to easily achieve using existing tools, techniques ...

  • Rats in a sewer...

    Stuart King - Reed Elsevier 04 Jan 2007
  • How many botnets reside within your network? Are you worried about the almost certain fact that they do? I described it to a colleague today as being similar to rats in a sewer. These insidious ...

  • How important is this?

    Stuart King - Reed Elsevier 03 Jan 2007
  • I got asked a very important question today. The question related to a report I have written covering the risk status of various different products and situations. It's a very detailed and indepth ...

  • Importance of security in the SDLC

    Stuart King - Reed Elsevier 03 Jan 2007
  • David Lacey mentions the importance of embedding security into the SDLC in his blog . It's a view I completely support and frequently see the positive impact on risk status between those products ...

  • Importance of documenting requirements

    Stuart King - Reed Elsevier 02 Jan 2007
  • The first question I ask of a web product risk assessment is whether security requirements have been documented. I think it's an important question - there is a definate correlation between the ...