We see in the news another example of cyber criminals successfully stealing a private certificate and using it to their nefarious advantage. In this instance, cyber criminals allegedly exploited perimeter defences and web application security to gain access to one of Bit9’s private certificates – https://blog.bit9.com/2013/02/08/bit9-and-our-customers-security/. A private certificate is used to sign an encryption
Tim Holman, CEO 2-sec featured in the UK’s leading national newspaper, The Guardian, talking about social media. Both in print and online. http://www.guardian.co.uk/media-network/media-network-blog/2013/feb/11/social-media-workplace
2-sec in The Guardian – Feb 2013 Read More »
Presented by ISSA International & Generously Hosted by Deloitte Theme: Secure Information for Europe The 2013 ISSA London Conference will focus on some key challenges we all face; Cyber Crime, Cyber Conflict & Cyber Espionage. At this conference attendees will hear from leading European & International speakers that will inform and set our future direction
ISSA European Conference – Feb 5 2013 Read More »
Tim Holman discussing security concerns for 2014 – read more..
Computer Weekly – Dec 2014 Read More »
As you may have heard on the grapevine 2-sec’s SIG proposal for Third Party Security Assurance was accepted and we are currently working with the PCI SSC to flesh out plans for improving service provider engagement guidance and influencing the outcome of PCI DSS v3.0, to help better serve and secure the payments community. Control
PCI SSC Third Party Security Assurance SIG Read More »
PCI DSS 12.5 “Assign to an individual or team the following information security management responsibilities” is not just about putting somebody’s name down to pass an audit and us QSAs are clamping down hard on those whom pay governance lip service, then forget about it for a year until the next audit is due. Even
PCI DSS governance Read More »
Well, maybe manipulation is a bit of a strong word, but the reason for this title is due to the increasing number of requests we get as QSAs to help out smaller, level 4 merchants, whom have been instructed by the likes of Worldpay, RBS Worldpay (aka Streamline), Barclaycard Business, HSBC or PayPal, to go
The Cunning Art of ASV Manipulation! Read More »
I am presenting a proposal to setup a SIG for Third Party Assurance at both Orlando and Dublin PCI SSC Community Meetings. The aim of the SIG is to provide additional guidance around control 12.8, which to date we think is somewhat open to interpretation. The control as it stands: 12.8 If cardholder data is
PCI SSC Special Interest Group (SIG) – Third Party Assurance Read More »
Look out for us at PCI Europe’s London event on July 5th, in association with Visa – http://www.pci-portal.com/pci-europe/
PCI London – July 2012 Read More »
