article thumbnail

Assessing Third-Party InfoSec Risk Management

Security Boulevard

Information security (InfoSec) risk management with third parties, including outsourcing, requires persistence and consistency due to the primary business risk it presents. Third-party managers need to have insights into a variety of areas of information security, including.

InfoSec 96
article thumbnail

Demand, CyberInsurance, and Automation/AI Are the Future of InfoSec

Daniel Miessler

I think there are four main trends that will play out in the field of information security in the next 20 years. 2021-2030) A Surge in Demand for InfoSec people will result in many more professionals being trained and placed within companies, likely using more of a trade/certification model than a 4-year university model.

InfoSec 255
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Shortage of Information Security Professionals

Security Boulevard

As data breaches at corporations, educational institutions, and government agencies continue to grow, so does the need. The post Shortage of Information Security Professionals appeared first on Security Boulevard. In recent years, there has been an exponential increase in high-profile data breaches.

article thumbnail

Iterative scientific infosec

Notice Bored

So, this morning I've been thinking about the applications of those principles and mechanisms to information risk management, putting infosec under the microscope. Improving' or 'advancing' infosec is more involved than it seems. It requires thoughtful strategising, intelligent decision-making , appropriate governance.

InfoSec 74
article thumbnail

InfoSec Reviews in Project Management Workflows

Security Boulevard

I have attended numerous security conferences over the past several years, and at each one, I repeatedly hear about the importance of information security being incorporated within the planning and requirement analysis phase of the software development life cycle (SDLC). I agree – this is very important.

InfoSec 95
article thumbnail

Professional services infosec policy template

Notice Bored

We have just completed and released a brand new information security policy template on professional services. Professional services engagements, and hence the associated information risks, are so diverse that it made no sense to specify particular infosec controls, except a few examples.

InfoSec 66
article thumbnail

NBlog Aug 8 - musing on ISO/IEC 27014 & infosec governance

Notice Bored

This morning I've been studying the final draft of the forthcoming second edition of ISO/IEC 27014 "Governance of information security" , partly to update ISO27001security.com but mostly out of my fascination with the topic. This will support the delivery of security education, training and awareness programs.