article thumbnail

Thinking About the Future of InfoSec (v2022)

Daniel Miessler

The ideas will cover multiple aspects of InfoSec, from organizational structure to technology. At the highest level, I think the big change to InfoSec will be a loss of magic compared to now. HT to Jeremiah Grossman to also being very early to seeing the role of insurance in InfoSec. Org Structure. Technology. Regulation.

InfoSec 180
article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

M]uch of InfoSec management falls back on employee training and avoiding employee error – particularly with respect to phishing , spear phishing, and encryption lapses.”. Trotter further argued that encryption of Anthem’s data at rest would have offered only minimal security benefits and would not have prevented the hack.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The CPRA: What You Should Know as an InfoSec Professional

SecureWorld News

Endpoint encryption for all laptops. Cyber insurance (critical). Well documented policies and standards for employees (data handling). Enterprise endpoint protection and remediation (anti-malware, anti-virus software). Intrusion detection and response. And more (listen in for the full list). "I

InfoSec 76
article thumbnail

How Not to Pay the Ransom? No Soup For You, Ransomware!

Thales Cloud Protection & Licensing

Too many businesses cannot continue their activities until they recover the data encrypted by ransomware. Many collaborative platforms can help you recover the data encrypted by ransomware. Your own systems may fail to process the encryption key. And do not forget about data encryption, both data in transit and static.