In Depth

In Depth

IT risk management

• Video: Laptops are not waterproof

  ComputerWeekly was sent this video from OnTrack, which we thought we'd share. Relaxing on a beach, a gentleman had taken his laptop on his holiday to...  Continue Reading

• The real cost of PCI DSS compliance

  It's difficult to overestimate the impact PCI DSS has had on information security, not least because of the expense of compliance. As part of SearchSecurity.co.UK's Royal Holloway University of London thesis series, Martin Bradley and Alexander ...  Continue Reading

• Cloud security creates new challenges

  Security consultant Heinz Zerbes writes that cloud security creates different challenges, and offers advice on how to meet them.  Continue Reading

• Top tips to guard against Stuxnet

  There is much that security professionals can learn from Stuxnet, says Adrian Davis, principal research analyst at ISF for the Stuxnet Think Tank. The malware should have sounded a call to action on several fronts.  Continue Reading

• Stuxnet – the prototype cyber weapon?

  Hailed as the most sophisticated malware ever found, Stuxnet is widely seen as a prototype cyber weapon, pushing the concept of cyber warfare into the realm of the possible.  Continue Reading

• How to combat Stuxnet

  ISSA’s Raj Samani suggests that within control system networks where only known applications run, a simple strategy to combat Stuxnet would be to allow only authorised executables to run and deny everything else.  Continue Reading

• Basic security can help tackle Stuxnet

  One important lesson IT managers can learn from Stuxnet is that it is a huge mistake to buy software with known hardcoded passwords, says John Pescatore, research vice-president at Gartner.  Continue Reading

• Security zone: opinions and insights from experienced professionals

  Information security has become a mainstream concern with well-established governance and compliance, increasing public awareness and more business processes going online. Security is an integral part of every business process. It must be built into...  Continue Reading

• Security Think Tank: What are the risks associated with social-media use, and who owns these risks?

  Is social media a security problem? What are the security risks associated with social-media use, and who owns these risks?  Continue Reading

• How IT departments can manage DIY technology

  Staff in companies are using low-cost accessible technology to connect their customers and innovate. One in three company employees are doing this already, under the radar.  Continue Reading

• Sneaking a smart phone into the enterprise

  Are smart phones connected to the corporate network a good idea?  Continue Reading

• Buyers guide to the connected enterprise: the next decade

  The past decade began with the steady adoption for IP telephony and voice and data convergence. Unified communications appeared a few years later and delivered a framework that supports integrated communications and collaboration applications. This ...  Continue Reading

• CIO interview: BAA checks in IT transformation

  When IT veteran Philip Langsdale joined BAA as chief information officer with a brief of creating a technology strategy to support a £4.8bn capital investment plan, he knew he was not in for a smooth ride.  Continue Reading

• Can information security deliver business value?

  Information security remains a perennial priority for IT leaders.  Continue Reading

• Think Tank: Are firms succeeding in converging operational risk management?

  To what extent are UK organisations succeeding in bringing together enterprise risk management, security, business continuity and regulatory compliance to set better priorities?  Continue Reading