Just 33% of Orgs Have Endpoint Security Strategy

Endpoint management has always been an important component of an effective IT security strategy, but it is becoming more and more immediately relevant given the recent leveraging of IoT devices in DDOS attacks and snooping.

http://www.infosecurity-magazine.com/news/just-33-of-orgs-have-endpoint/

The “Why’s” and “How’s” of an Incident Management Call

I fully realize that the article linked in this post is effectively an ad for Tripwire Enterprise. I get it.  For the record, TE is a fantastic product and personal favorite among FIM/Change Management solutions.  That is not why I am posting and linking the article.  It’s true value lies in the conversation around incident management questions.

Organizations really do need to ask themselves these questions and be prepared for the ramifications that come when they cannot provide adequate answers.  Incident management prep is a fundamental need for every organization.

http://www.tripwire.com/state-of-security/incident-detection/the-whys-and-hows-of-an-incident-management-call/

Watch The Target, Not Just The Wire

Full disclosure – This article is written by a Tripwire employee and is designed to highlight Tripwire Enterprise.  That said, the first 2/3’s of the article discuss the very relevant trend of moving back away from the wire, from network monitoring alone, and again toward endpoint security.  Tripwire is one option.  There are others.  The discussion is quite relevant.

http://www.tripwire.com/state-of-security/security-data-protection/watch-the-target-not-just-the-wire/

Why Do I Need A SIEM?

I have previously shared the initial article in this series and believe it is a great overview of the benefits and reasoning behind SIEM and SIEM technologies.  I personally believe every organization at some level needs strong log collection and correlation, along with many of the other features generally attributed to SIEM.

http://www.tripwire.com/state-of-security/incident-detection/log-management-siem/why-do-i-need-a-siem/

Tackling Point-Of-Sale Threat From the Inside Out

This is an interesting review of some of the challenges and pitfalls associated with POS security and related malware threats.  There is also some strong product placement for Tripwire’s Enterprise solution for Point-of-Sale.  I will admit that I utilized this product in a previous retail IT security position and believe it is a strong solution for POS change control and monitoring.

http://www.tripwire.com/state-of-security/regulatory-compliance/pci/tackling-point-of-sale-threat-from-the-inside-out/