Content by Tom Field

ENISA Tackles Cybersecurity

Tom Field  •  August 1, 2011

Because information security threats know no borders, the European Network and Information Security Agency is working hard to ensure the solutions span nations, too, says Prof. Udo Helmbrecht, ENISA's executive director.

Conforming with the FFIEC Authentication Guidance

Tom Field  •  July 26, 2011

On June 28, the FFIEC released its final, formal version of its Authentication Guidance. Not even one month later, we've created three new training programs to help banking institutions understand and conform with the guidance.

Forensics in the Cloud

Tom Field  •  July 26, 2011

Performing digital forensics in the cloud isn't necessarily a new discipline, says Rob Lee of SANS Institute. But the task definitely requires a whole new mindset and some new skills from investigators.

Cybersecurity: The New Frontier

Tom Field  •  July 25, 2011

Dickie George of the National Security Agency has one word to describe the state of information security education today: "Spotty." And this state must improve if we hope to fill all the growing demand for security pros.

The Ethics of Information Security

Tom Field  •  July 25, 2011

It is no longer enough for information security professionals to secure critical information. They also need to be asking about the legitimacy of where this information comes from, says John Colley, managing director of (ISC)2 in EMEA.

ACH Fraud Claims New Victim

Tom Field  •  July 22, 2011

You know the tune: Cyber thieves pirated the town's banking credentials, arranged some bogus "payroll transactions" with the town's bank and then next thing you know ... money mules are transferring funds to the Ukraine.

FFIEC Authentication Guidance: What Your Vendors Need to Know

Tom Field  •  July 21, 2011

It's not enough for banking institutions to conform to the FFIEC Authentication Guidance update. They also must ensure that their key vendors meet the same standards, says Philip Alexander of Wells Fargo Bank.

Elements of a Social Media Policy

Tom Field  •  July 19, 2011

You know your organization's social media policy is a good one when it starts sounding less like a checklist and more like common sense, says Sherrie Madia, social media expert and author.

FFIEC Authentication Guidance: How to Prepare for 2012

Tom Field  •  July 15, 2011

Now that the FFIEC Authentication Guidance update has been issued, there is no more important task for banking institutions than to conduct their risk assessments, says Matthew Speare of M&T Bank Corp.

New Roles in Risk Management

Tom Field  •  July 11, 2011

Recent high-profile data breaches and heightened threats add up to one thing: a bright future for information security professionals who want to start or re-start a career in risk management.

Fraud Fighters Wanted

Tom Field  •  July 5, 2011

Today's top fraud threats recognize no global boundaries, says James Ratley, head of the Association of Certified Fraud Examiners. And they require a stronger global workforce than ever before.

Privacy by Redesign: A New Concept

Tom Field  •  June 28, 2011

Organizations' biggest obstacles to privacy protection are the organizations themselves - specifically, their silos - says Dr. Ann Cavoukian, proponent of the new concept, Privacy by Redesign.

Online: Many Banks 'Not Ready'

Tom Field  •  June 21, 2011

Online and mobile banking are taking the world by storm - especially in the Asia-Pacific region. But many institutions are simply not prepared to manage security and privacy appropriately in these venues, says Gartner's Matthew Cheung.

Mobile Devices - Risks & Rewards

Tom Field  •  June 3, 2011

What's the top threat on the minds of global IT leaders? Employee-owned mobile devices - or BYOD (bring your own device), as the trend is known. The struggle: Do mobile device benefits outweigh the organizational risks?

Talking About Privacy

Tom Field  •  May 31, 2011

I've had the occasion recently to interview two noted privacy professionals, and I want to share some of their insights with you.