I've just interviewed Dr. Peter Tippett from Verizon Business. If you're in the security business, you're probably already aware of the 2008 Data Breach Investigations Report issued in June of this year. The same team has just issued a followup supplement to that report -- Dr. Tippett is one of the contributors to that report.

This conversation is the first half of the interview. Part two will follow on Thursday.

This is a terrific couple of reports and Tippett's insights on the data make this one of the Security Provoked videocast's best interviews to date. I was struck by how the Verizon data suggests that mistakes in system configuration and problems like forgetting that *some* of the credit card processing was running on a server that the organization had more or less forgotten about were at the root of the vast majority of the major incidents. Think those hard-to-manage USB thumb drives are the big threat? Have a listen...

Other Security Provoked videocasts are available here.