The Security Scrutinizer

Governance & Risk Management

Disputed GOP Memo Released: So Now What?

Howard Anderson • February 2, 2018

The ongoing battle between the White House and the Justice Department and intelligence community could undermine American's confidence in the nation's top law enforcement officials.

Breach Notification

My Data Breach Experience

Howard Anderson • December 11, 2013

Receiving a notification letter about a data breach brings home the reality of just how common these incidents are - and how much prevention work, including encryption, still needs to be done.

Incident & Breach Response

Study: Cybercrime Costs Grow 26%

Howard Anderson • October 8, 2013

A new Ponemon Institute study shows the average annual cost of cybercrime for 60 major U.S. companies rose 26 percent this year. Find out some of the factors contributing to the rising cost.

Events

The Security Highlight of HIPAA Omnibus

Howard Anderson • March 1, 2013

The HIPAA Omnibus Rule stresses the need for business associates to adequately safeguard patient information. What are the implications? Here's what a federal privacy officer and a consumer advocate have to say.

Events

CISOs: Building Credibility

Howard Anderson • February 26, 2013

CISOs looking for a way to build credibility with senior executives - and win funding for important projects - need to drop the "just say no" approach and build a reputation as a team player, says security professor Ray Davidson.

Governance & Risk Management

An Entertaining Approach to Training

Howard Anderson • September 12, 2012

A federal agency is offering a free online training program that provides useful insights on protecting information privacy. Learn how this clever training "game" works.

Cloud Data Security & Resilience

A Tribute to Terrell Herzig

Howard Anderson • July 10, 2012

In a tribute, we remember Terrell Herzig, information security officer at UAB Health System, an innovator who was passionate about sharing best practices for protecting sensitive information.

Enterprise Mobility Management / BYOD

Experiment Reveals Smart Phone Risks

Howard Anderson • March 13, 2012

A clever experiment involving 50 "lost" smart phones highlights the potential risks involved if mobile devices are not adequately protected.

Events

What Should CISOs' Priorities Be?

Howard Anderson • March 1, 2012

What do executives at RSA, eBay, USAA and Accenture have to say about the top priorities for information security professionals? Read on to find out.

Fraud Management & Cybercrime

Outrageous Behavior on Facebook

Howard Anderson • January 5, 2012

Outrageous Facebook behavior by a contractor at a California hospital offers an eye-opening reminder about the need for a zero-tolerance policy when it comes to privacy violations.

Enterprise Mobility Management / BYOD

Mobile Device Security: A Top Priority

Howard Anderson • November 8, 2011

Improving mobile device security is one of the top information security priorities for the coming year, according to our new Healthcare Information Security Today survey. And that's not surprising, given the recent surge of interest in tablets, smart phones and other mobile devices.

Governance & Risk Management

FTC's Privacy Proposals Worth a Look

Howard Anderson • December 17, 2010

Kudos to the Federal Trade Commission for outlining a series of proposed steps to protect the privacy of consumers who surf the Internet.

Cloud Security

New Tech Trends, New Security Risks

Howard Anderson • November 18, 2010

Key factors making the security landscape riskier are the rapid rise of social networking, the growing reliance on cloud computing and the growing sophistication, criminalization and organization of hackers, a new survey shows.

Electronic Healthcare Records

When Will PHR Rules be Ready?

Howard Anderson • April 22, 2010

When will federal regulators draft long-awaited privacy and security rules for personal health records? So far, officials at the Department of Health and Human Services are being tight-lipped on the subject. Asked about the status of the rules, which, under the HITECH Act, were due in February, an HHS spokesman would...