The Anatomy of Security Disasters from Marcus Ranum, computer security, photography, and other weirdness – Security problems begin with bad management and lack of vision.
Excellent and thought provoking essay from Marcus Ranum.
It’s time to revamp your Defense-in-Depth strategy from Security Insights Blog by Tony Zirnoon
Up until now if you asked any security professional or consultant to provide you a best practice strategy for securing your enterprise, they would most likely recommend that you follow the Defense-in-Depth (DiD) strategy. That is to use multiple computer security techniques to help mitigate the risk of one component of the defense being compromised or circumvented. Although this has proven to be a sound strategy for the most part, as a security practitioner, I would have a tough time making that recommendation to customers that are adopting a Cloud Computing model.
Managed Security in the Enterprise: It’s Tough Out There from Security Response Weblog by Grant Geyer (Part one in a four-part series)
Most security practitioners won’t be surprised to hear this: security is tough, and getting tougher. In fact, at times, I’m sure it seems like a perfect storm of problems; the threats are getting worse, losses are mounting, and—in the midst of the global downturn—there are very real concerns around staffing and budgets.
Earlier this week, we announced the findings of a new study, Managed Security in the Enterprise, based on surveys of 1,000 IT managers in U.S. and European enterprises in January 2009. We used this to complement the Symantec Internet Security Threat Report, vol. XIII in order to obtain qualitative data through feedback from security practitioners about changes in the threat landscape, its impact on their business, and how they are dealing with the cyber security challenges they are facing. I’ll recap the study highlights over the next week in a four-part series.
6 Tips For Doing More Security With Less from Dark Reading: Dark Reading News Analysis – Ways to squeeze more out of your security budget in trying times
- Get out of the deployment business.
- Spread the cost of security with other groups.
- Get more out of your existing security tools and systems.
- Tie a security purchase to your compliance mandates.
- Outsource or automate some security functions.
- Take advantage of a security buyer’s market.
Secure Data Disposal from WindowSecurity.com by Ricky M. Magalhaes
Secure data disposal methods; how organisations that reuse media may employ countermeasures to prevent exposure.
Over the last year, we’ve published two posts about how the IE8 SmartScreen® filter helps to prevent phishing and malware attacks. In this post, I’d like to share some real-world data on the protection provided to IE8 pre-release users by the anti-malware feature. We’ve invested heavily in this feature, and we’ve seen significant results.
Internet Explorer 8
In sharp contrast to certain dimwitted bloggers out there, no one can ever accuse Ed Bott of "false misunderstanding." The guy grabs on to a topic and shakes it until it squeaks, and for this reason, he’ll always be the voice of reason in our industry. The topic du jour: Reports that IE 8 is slow and a memory hog. Take it away, Ed:
In this 5 minute screencast, Lee Reed shows how to modify a links list by removing those annoying little tags before each of the headings in a list.
(Embarrassing but) True SharePoint Confessions: How to Delete a List Column from SharePoint Blank by John Anderson
It’s been a little while since I’ve thoroughly embarrassed myself with one of my patented SharePoint Newbie Confessions, so here’s one for you to have a laugh on me. It’s Friday, after all, so why not? And, hey, who knows, maybe documenting my own misadventures here will help some other poor soul out there in the same boat … which is, after all, the entire point of my SharePoint Blank endeavors.
In case you’re wondering, yes, the length of the above preamble (up to and including having felt the need to provide justification for same) is absolutely an indication of just how embarrassing this particular confession is going to be.
SharePoint Documentation – Why Does it Stink? from SharePoint Joel’s SharePoint Land: Posts by Joel Oleson
I hear there’s a problem these days of people saying…. I’ve got the governance doc, so I’m now good to deploy. I’m now going to have a successful deployment.
Have I created a monster? In my attempts at addressing the lack of planning and of awareness around designing a SharePoint service not just installing software, I find more and more are now realizing that “Governance” is something they were missing. More than that it really that they were missing a service definition, missing an exec sponsor, missing roles and responsibilities. Governance has become a buzzword, and the original definition is being lost despite my attempts at defining it as designing a service offering.
Using legacy FrontPage functionality in SharePoint and SharePoint Designer to create a file "drop box" from Woody Windischman – The Sanity Point
SharePoint is a great tool for information sharing. Document libraries allow your users to upload and collaborate on documents of all sorts. Sometimes, though, you don’t want to do things quite the way SharePoint does it.
A Resource for PM Materials from Herding Cats by Glen Alleman
I’ve been embedded on a proposal team of late as well as working on my presentation of EVM World 2009 and manning the booth at several trade shows – Space Symposium, Space Command. The result is a lack of ideas for posting. Instead I’ve been reading my Google Reader list and catching up on edits of our program controls handbook.
What became clear was the resources available at Mosaic Project Services Pty Ltd. The first one is being used directly in some of our responses to scheduling issues on a large program. "Scheduling in the Age of Complexity," is a mandatory read for anyone interested in professional project planning and controls.
Microsoft Project & Project Server
Announcing the release of the February Cumulative Update for Project and Project Server 2007 from Christophe Fiessinger’s Blog
The February Cumulative Update was recently released. The next Cumulative Update (CU) is scheduled for the end of April, then Service Pack 2 will be available between February and April and it will include the February CU.
Update for “Manage Active Directory synchronization in Project Server 2007” covers user synchronization issues from Microsoft Enterprise Project Management Content Publishing News
The article Manage Active Directory synchronization in Project Server 2007 will contain the following updated information when it appears in the Project Server 2007 TechCenter next week.
Microsoft Project for the beginning user – Recorded WebNLearn from MPUG Blogs: Posts by Kirk Vantine
Recently Bill Raymond, Microsoft Project MVP, stopped by to give a great webNlearn to MPUG members titled "Microsoft Project for the Beginning User – Learn from the MVP".
I think even the most experienced Microsoft Project users may be able to gain a few tips and tricks from Bill’s presentation. I would encourage all new and experienced users to view the webNlearn recording available in the knowledge library. You do need to be a paid member of MPUG to view this recording.
Dual Boot Between Windows XP and Windows 7 from TechNet Edge by Rob Waggoner
Now that you’ve downloaded the Windows 7 beta, let’s talk about how you can configure your machine to dual boot between Windows Vista and Windows 7, or even Window XP and Windows 7.
Microsoft Releases "Learning Snack" Windows 7 Training for IT Professionals from The Road to Know Where
Microsoft has released Learning Snack #1 training entitled "Introducing Windows 7" based upon their popular TechNet "Springboard Series" for IT Professionals.