Content by Tom Field

Understanding Electronically Stored Info

Tom Field  •  May 29, 2012

For years, David Matthews, Deputy CISO of the City of Seattle, has been immersed in securing electronically stored information. Now he's written the book on the topic. What are the key themes addressed?

Why Boards of Directors Don't Get It

Tom Field  •  May 24, 2012

IT risk management, cyber insurance, privacy - these are hot topics for security leaders, but not for their boards of directors. Why do senior executives still fail to see IT risks as business risks?

Matching Personalities to Jobs

Tom Field  •  May 18, 2012

Do you have the right personality type to flourish in an IT security role? Laurence Shatkin, author of "50 Best Jobs for Your Personality," offers tips for finding the job that truly fits your type.

Risks of False Credentials

Tom Field  •  May 14, 2012

How common are padded resumes like the one that led to the departure of Yahoo CEO Scott Thompson? Far too common, says attorney Les Rosen, who offers tips to help organizations manage such risks.

How to Spot a Fraudster

Tom Field  •  May 9, 2012

Who is more likely to commit fraud in your organization - the newly-hired youngster or the long-tenured veteran? The ACFE's new 2012 Global Fraud Study profiles the top fraudsters and their schemes.

Key Characteristics of Influential CISOs

Tom Field  •  May 7, 2012

A new IBM study identifies three distinct types of information security leaders: Influencers, Protectors and Responders. Which type are you? IBM's Marc van Zadelhoff offers tips for more effective leadership.

'It's a War for Talent'

Tom Field  •  May 3, 2012

The information security profession is a 'war for talent' today, says recruiter Kathy Lavinder. But to win the war requires specialized skill sets. Here are today's top requirements.

New BC Standard: 'An End to Uncertainty'

Tom Field  •  April 25, 2012

Lyndon Bird, technical director of the Business Continuity Institute, praises the ISO 22301 standard for business continuity, calling it "An end to uncertainty." Learn about the emerging standard.

Incident Response: The Gaps

Tom Field  •  April 16, 2012

To respond to a security incident, an organization must first be aware of it. But too many intrusions go undetected, says Rob Lee of SANS Institute. That's the first problem that needs to be addressed.

Security Education for Senior Execs

Tom Field  •  April 6, 2012

Where do time-strapped senior leaders go for education on cyber forensics and incident response? Carnegie Mellon University has a new option, and Dena Haritos Tsamitis explains its unique approach.

3 Ways to Fight the Insider Threat

Tom Field  •  March 24, 2012

Increasingly, social engineers target unwitting insiders to plunder organizations' financial and intellectual assets. How can you prevent these and traditional inside attacks? CMU's Dawn Cappelli offers tips.

The Cost of a Data Breach

Tom Field  •  March 23, 2012

The average per capita cost of a data breach has declined from $214 to $194, according to the new Cost of a Data Breach study. But there are still plenty of causes for concern, says Dr. Larry Ponemon.

2012 Faces of Fraud Survey: Complying with the FFIEC Guidance

Presented by Tom Field , Matthew M. Speare , George Tubin  •  March 19, 2012

The FFIEC Authentication Guidance update has been in circulation since mid-2011. But as banking examiners begin testing for conformance, we find: Only 11% of surveyed institutions have come into conformance since the guidance was issued; Nearly 30% don't fully understand the guidance; 88% do not believe the...

Video: Lessons Learned from Breaches

Tom Field  •  March 8, 2012

Organizations are not taking the advanced persistent threat seriously enough, says Hord Tipton of (ISC)2. But security professionals also are not mitigating the common threats, he says. Watch the video.

Breaches: The Top Trends

Tom Field  •  March 2, 2012

What are the top global breach trends and threats that organizations should be watching? Wade Baker of Verizon offers insights gleaned from a new study of his group's latest investigations.