Information Security and Network Security Blog

Security Manager (penetration testing, web application security, security assessments, etc.)

Organization Manager

---

Security Engineer

RECENT POSTS

Penetration Testing - Do you Know the Question?
An information security penetration test (pen test) is a systematic probing of a system for vulnerabilities. In most instances, the assessment is performed externally, from a remote location.  Do you know the answer to the most important question?
Tags: penetration testing | pen test | penetration test |external security audit

Website Security and Web Application Security
If automated vulnerability scanners caught all security risks, hackers would be out of business and security personnel wouldn't have much to do. In reality, automated vulnerability scanners are only one tool used in the process of identifying and managing security risks.
Tags: website security | web site security | penetration test | website security audit

Security Assessments - a Subscription
Security is an on-going process and leading organizations are taking a subscription approach to security assessments. With new vulnerabilities discovered on a daily basis, a system that is secure one day may be completely wide open the next.
Tags: network assessment | security assessment | security audit | website security audit | penetration test | pen test

Physical Security Enhances Information Security
Business executives are concerned about protecting their sensitive data and intellectual property. In addition to implementing firewalls and anti-virus solutions, management needs to be aware of physical security threats.
Tags: risk assessment | physical security | physical security audit | physical security assessment

Security Suite or Best of Breed?
When choosing an enterprise security solution for your organization is it better to choose an all encompassing security suite from one vendor or select the best software in each class even if it means using a number of different vendors?
Tags: risk assessment | security software | security suite | antivirus software

Five Steps to Securing Sensitive Information
Safeguarding sensitive data helps ensure that you meet your obligation to your customers, affiliates, and employees. Altius IT's five simple steps you can take to secure sensitive information.
Tags: information security | data security | network security

A SMART Guide to Managing Social Media Risks
Altius IT's SMART guide is a five step approach to managing social media risks that can lead to information disclosure, compromise of your data, and loss of system availability.
Tags: social media security | social networking security | social networking threats | social networking risks

Cloud Computing - Thunder and Lightning on your Horizon?
With Cloud Computing, your staff uses browsers to access software that runs outside the organization on Internet servers. Like any technology, Cloud Computing and Software as a Service (SAAS) has its risks.
Tags: cloud computing | risk assessment | software as a service | saas

Start with Security Policies
Many businesses use an ad-hoc approach to securing information. Policies and procedures help organizations manage and control information security risks.
Tags: security policies | policies and procedures | information security policy | security policy | security policy template

Smartphone Security
Today's smartphones come with advanced features such as the ability to connect to the Internet, download applications, store pictures and videos, use wireless connectivity, etc. While smartphones increase productivity, they also come with risks.
Tags: smartphone security | cell phone security | phone security

Mobile Payment Solutions and Risks
Mobile payment solutions are a quick and easy way to make retail purchases.  For the service provider, imagine the benefits of being able to track consumer buying history with their current location.. While payment solutions offer convenience, they also come with risks.
Tags: mobile payment, smartphone payment, cell phone payment, electronic wallet, privacy, security, risks

Social Engineering and Social Networking - Your Users are a Target
Social engineering and social networks can be used to manipulate your staff into performing actions or divulging confidential information. Security education and awareness training help educate your users of the risks they face and the impact on the organization.
Tags: social engineering | social networking | social networks | user security training | risk assessment | social engineering assessment

Are you Managing your E-mail Risks?
E-mail is critical to the success and operation of most organizations. Without e-mail, organizations are less efficient and can’t compete against larger, and more established firms.  Are you aware of all of your e-mail risks?
Tags: risk assessment | email risks | email risk management

Are you Maximizing your Cloud Opportunities?
Cloud technology has expanded and allows almost any IT related resource to be offered as a service. By knowing the types of Cloud environments available, you can make informed business decisions and ensure you are maximizing your use of the Cloud.
Tags: cloud environments | software as a service | saas | types of clouds | everything as a service | anything as a service