It has been almost two years since I concluded my initial series of blog entries on “Tales of a Social Engineer” (http://tinyurl.com/ZPR-Tales). In that intervening period, it was my hope obsessive longing that data breaches precipitated by social engineering would be curtailed. It was my hope potentially misguided expectation that there would be calls to [...]
Filed under: - Cloud Computing, - Compliance Issues, - Global Risks & Threats, - Massachusetts Privacy Law, - Tales of a Social Engineer Series, - Third-Party Risk | Comment (1)
John Graham, an assistant vice president and senior technology specialist with the Chubb Group of Insurance Companies, is one of a series of guest posters on the ZeroPoint blog. We’ve all seen the news reports about the latest data breach and the ensuing class action litigation. But a new trend is emerging. There are [...]
Filed under: - Compliance Issues, - Global Risks & Threats, - Massachusetts Privacy Law, - Third-Party Risk, Guest Blogs | Comment (1)
John Graham is an assistant vice president and senior technology specialist with the Chubb Group of Insurance Companies. In the course of underwriting an insurance program for a potential insurance buyer, I need to dive deep into all aspects of their firm’s information security practices, not just its network security. One area that I review [...]
Filed under: - Compliance Issues, - Global Risks & Threats, - Massachusetts Privacy Law, Guest Blogs | Comment (1)
An article by Bob Hohler in yesterday’s Boston Globe (http://bo.st/nlbbrR) noted information about Terry Francona having taken pain killers for his surgeries over the years. The portion of the article that most catches my eyes is the following (and please note that I have added some bold text for additional emphasis): “Team sources also expressed [...]
Filed under: - Compliance Issues, - Massachusetts Privacy Law | Comment (1)
MacDonnell Ulsch is the CEO and Chief Analyst at ZeroPoint Risk Research, and the author of the book “THREAT! Managing Risk in a Hostile World.” Espionage is escalating in a troubled global economy. The secret of success in innovation is much like the breaking of the enigma code. Cracking the code often requires multiple [...]
Filed under: - Cloud Computing, - Compliance Issues, - Global Risks & Threats, - Third-Party Risk | Comment (0)
John Graham is an assistant vice president and senior technology specialist with the Chubb Group of Insurance Companies. Data breaches leading to privacy violations do not show any signs of letting up. Just like many people who think they’ll never be the victims of a flood (Hurricane Irene has changed that for many of us), [...]
Filed under: - Compliance Issues, - Global Risks & Threats, - Massachusetts Privacy Law, Guest Blogs | Comment (0)
I never would have imagined that my training in risk management reached back to the ninth grade. But in retrospect, it did. Brother Cornelius was my math teacher in the ninth grade. One of the things I remember about him was that he forced us not only to arrive at the right answer, but also [...]
Filed under: - Compliance Issues, - Global Risks & Threats | Comment (1)
John Graham is an assistant vice president and senior technology specialist with the Chubb Group of Insurance Companies. At the August Black Hat security conference, an attendee, Jay Radcliffe, demonstrated how he could wirelessly hack into his own insulin pump and increase or decrease the dosage or shut it off entirely. Given the rate at [...]
Filed under: - Compliance Issues, - Massachusetts Privacy Law, - Third-Party Risk, Guest Blogs | Comment (0)
One of the things I continue to observe with many of my clients, and it never ceases to amaze me, is the overall lack of awareness to information security and properly protecting information/data. The number of breaches that we continue to see reported in the media today is staggering and seems to be never-ending. Please [...]
Filed under: - Cloud Computing, - Compliance Issues, - Global Risks & Threats, - Massachusetts Privacy Law, - Third-Party Risk | Comment (0)
By MacDonnell Ulsch and Michael J. Sullivan It seems as if cloud computing is the next big thing. Embraced as a critical growth strategy by leading U.S. companies, cloud computing makes a compelling argument in the ailing global economy. The attraction of cloud computing is that companies can expand operations using someone else’s technology, and [...]
Filed under: - Cloud Computing, - Compliance Issues, - Global Risks & Threats, - Massachusetts Privacy Law, - Third-Party Risk | Comment (0)