Feet on the Street: Day 2 of Security Summit Focuses on Customer Successes

Today during the Gartner Information Security Summit, SailPoint participated in a very interesting program put together by Gartner called the CISO Boardroom – an invitation-only forum designed to help CISOs and CSOs explore key IT security issues and strategies with their peers. We participated in a round table discussion where a vice president of enterprise [...]

Feet on the Street: Gartner’s Security Summit Focuses on Risk Management

Yesterday, we kicked off the first day of Gartner’s Information Security Summit (#GartnerSecurity) in Washington, DC with Chris Byrnes’ keynote, “Your Role in Information Security.” A major theme throughout the presentation was the growing emphasis on business risk management globally. Gartner predicts that in the next 18 months, the amount of legislation and regulation affecting [...]

All’s Fair in Security?

I read an interesting piece in InfoWorld by Roger Grimes, “A Sweet Solution to the Insider Threat.” The premise of Grimes’ article is that companies should use computer decoys, or “honeypots,” to catch workers attempting to login to resources they have no business reason for accessing. Honeypots by their very nature are fake computers that [...]

Steak Dinner for Your Data?

I’ve been at the RSA Conference all week, so I just noticed an intriguing news item from The Register on Monday. The article details survey results from an unnamed security vendor, concluding that one-third of workers are open to bribes for data theft. It’s beyond the scope of this blog to speculate on the statistical [...]

Verizon Business Report: Data Breaches Can Be Avoided

Verizon Business just posted the results of their 2009 Verizon Business Data Breach Investigations study this morning. This is Verizon Business’ second annual study, and it highlights some interesting – and unfortunately not surprising – statistics. Of the 285 million compromised records that Verizon studied, 93 percent occurred in the financial services sector (keep in [...]

Mind the Competence Inversion

Recently, an iGoogle “quote of the day” made me stop and think. Usually, I read the quotes, smirk, and move on. But this one was different: Technology is dominated by two types of people: those who understand what they do not manage, and those who manage what they do not understand. – Archibald Putt (a [...]

An Identity Report from the Road

For the past several weeks, I’ve been racking up the frequent flier miles, canvassing the identity management marketplace and talking with customers from various industries and geographies. My overwhelming conclusion from these meetings is that the concept of identity governance has rapidly evolved over the last 12 months from an auditor’s concern to an urgent [...]

Another Day, Another Breach

Heads up – there’s been another “massive” credit card security breach – the 3rd such incident in recent months. We don’t know which company suffered the breach, but it appears to be another card payment processor. We’re still in the “whisper period” as some call it – Visa and MasterCard have begun notifying banks, and [...]

Identity Risk Modeling: the Secret Sauce of IT Risk Management

Lately I’ve been talking to a lot of customers and prospects about how to proactively approach risk mitigation with identity-related technologies. In today’s climate, I see an ever increasing need for a new approach to managing identity and the need for a more “directed” focus for the deployment of identity management infrastructure. Over the past [...]

“Thwarting an Internal Hacker” – Monitor Access, Not Employees

I just read a Wall Street Journal article by Bruce Schneier, the CTO of BT and a renowned security author. The piece, “Thwarting an Internal Hacker,” is timely given recent security breaches hitting the news (including Heartland Payment Systems and Fannie Mae, which he references) coupled with the economy. I’ve already written about how the [...]