Content by Tom Field

Insider Fraud: The 'Low, Slow' Approach

Tom Field  •  September 4, 2012

Which employees are most apt to commit cyberfraud, and how can organizations detect and prevent their crimes? Researcher Randy Trzeciak shares insights and tips from a new insider threat study.

Hurricane Season: Are We Prepared?

Tom Field  •  August 29, 2012

As Tropical Storm Isaac strikes, many organizations still sting from the impact of Hurricane Irene and 2011's other natural disasters. What lessons were learned, and how can they be applied now?

Mitigating Messaging Risks

Tom Field  •  August 27, 2012

E-mail, IM, text messaging - we all increasingly depend on messaging technologies. And so do the fraudsters. Craig Spiezle of the Online Trust Alliance discusses how to mitigate our vulnerabilities.

Talking Security with the Board

Tom Field  •  August 24, 2012

Information security leaders increasingly take risk concerns to their boards of directors. But do they accurately articulate their messages? Heartland Payment's CSO warns of the most common mistakes.

FTC's Google Fine: The Privacy Message

Tom Field  •  August 10, 2012

Google's $22.5 million settlement with the Federal Trade Commission is the largest fine ever imposed by the FTC. But the case sends a bigger message about privacy, says attorney Francoise Gilbert.

The Privacy Pro's Challenge

Tom Field  •  August 6, 2012

There have never been so many job opportunities for privacy professionals. Nor have there ever been so many challenges. Trevor Hughes of the IAPP discusses what it takes to grow a privacy career.

Symantec's CISO on Security Leadership

Tom Field  •  August 3, 2012

Her first nine months on the job included a data breach and a CEO shakeup. Hear how Symantec CISO Patricia Titus has adapted to business change and re-focused the company's security team.

The Case for Background Screening

Tom Field  •  July 31, 2012

Amidst the hepatitis C outbreak at Exeter Hospital in New Hampshire, we need to ask: How could this happen? How could a medical technician even be hired after being fired at least twice by other hospitals?

Privacy: 'Do Not Track' Debate

Tom Field  •  July 31, 2012

Microsoft says its next version of the Internet Explorer web browser will feature "do not track" as a default user setting. What are the online privacy implications? Trevor Hughes of the IAPP weighs in.

Global Payments Breach: Too Few Details

Tom Field  •  July 27, 2012

In the latest update, much was left unsaid about the Global Payments data breach. And if I were a Global customer or card-issuing entity, I'd have some serious follow-up questions.

COBIT 5 for Security: What You Need to Know

Tom Field  •  July 23, 2012

ISACA just issued COBIT 5 for Information Security, a business-centric approach to governance and IT management. ISACA's Robert Stroud explains what COBIT 5 means to your organization.

Phishing Update: 'No Brand is Safe'

Tom Field  •  July 23, 2012

The number of phishing sites is at an all-time high. And so are the targeted brands. The message, says Peter Cassidy of the Anti-Phishing Working Group: "No brand is safe."

When Breach Planning Fails

Tom Field  •  July 20, 2012

When it comes to breach planning and response, well-intentioned organizations often go wrong. Experian Data Breach Resolution VP Michael Bruemmer tells where they fail and offers advice on how to do these important jobs right.

Don't Be Fooled by False Credentials

Tom Field  •  July 19, 2012

Falsified credentials are a growing concern for organizations, as job applicants fill their resumes with bogus academic degrees and job titles. Attorney Les Rosen offers tips for better screening.

Evolving Role of ID, Access Management

Tom Field  •  July 9, 2012

The role of identity and access management is as critical as ever. But the demands of the role? They are radically different, says Sam Curry, CTO of RSA, who discusses the new skills needed.