Retail Breaches Bolster Interest In NIST Cyber Security Advice - InformationWeek
IoT
IoT
Government // Cybersecurity
News
5/15/2014
11:05 AM
Connect Directly
LinkedIn
Twitter
RSS
E-Mail
RELATED EVENTS
Faster, More Effective Response With Threat Intelligence & Orchestration Playboo
Aug 31, 2017
Finding ways to increase speed, accuracy, and efficiency when responding to threats should be the ...Read More>>

Retail Breaches Bolster Interest In NIST Cyber Security Advice

Target data breach highlighted risks in corporate supply chains, and companies are looking to government guidelines for ways to shore up cyber defense, says White House.

White House National Security Council Advisor Ari Schwartz and US Deputy CIO Lisa Schlosser at FOSE conference
White House National Security Council Advisor Ari Schwartz and US Deputy CIO Lisa Schlosser at FOSE conference

Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
asksqn
50%
50%
asksqn,
User Rank: Ninja
6/10/2014 | 5:00:11 AM
Security isn't brain surgery
Curiously enough, NIST doesn't actually specify obvious practices, like say, oh, hiring an Information Security Officer. Following are some pertinent numbers (excerpted from Krebs on Security) of the Target breach that have nothing whatsoever to do with having to read about it in NIST.

If the US had a government that paid any kind of attention to consumer data breaches instead of enabling industry to get away with shoddy/non-existent security practices, we wouldn't need a NIST bulletin to drop an anvil on the heads of executive bobbleheads too cheap to pay a head IS employee. 

<excerpt Target Breach by the Numbers>

0 – The number of customer cards that Chip-and-PIN-enabled terminals would have been able to stop the bad guys from stealing had Target put the technology in place prior to the breach (without end-to-end encryption of card data, the card numbers and expiration dates can still be stolen and used in online transactions).

0 - The number of people in Chief Information Security Officer (CISO) or Chief Security Officer (CSO) jobs at Target (according to the AP).
pfretty
50%
50%
pfretty,
User Rank: Ninja
5/24/2014 | 8:34:19 AM
Not the answer
Government guidelines may help with some consistency, but that is not the answer.  Hack sophistication is on the rise as demonstrated in the HP Ponemon Cost of Cyber Crime report.  The only way to buck the trend is to increase awareness, invest in governance and get involved at a level beyond just the government and security division.  

Peter Fretty
JaCa
50%
50%
JaCa,
User Rank: Strategist
5/19/2014 | 12:19:43 PM
http://bit.ly/1c0f35M
Interesting article. The threat from hackers are ever increasing and its good to learn that the government has made recommendations to put in place a security framework that will help reduce security breaches and data loss.I work for McGladrey and there's a whitepaper on our website that offers good information on the above topic that readers will find interesting @  http://bit.ly/1c0f35M
WKash
50%
50%
WKash,
User Rank: Author
5/15/2014 | 6:25:27 PM
Next niche
White House cybersecurity adviser Ari Schwartz is a straight shooter, but he does work for the White House, so when he shared that companies are rolling out products to help companies implement some of the NIST Cybersecurity Framework practices, I was a little skeptical -- until I got my first pitch this week from for big consulting company offering to interview their folks about their newest product/consulting offering: aimed at helping companies incorporate the NIST Cyber framework into their operations.  A new niche is born.

 
How Enterprises Are Attacking the IT Security Enterprise
How Enterprises Are Attacking the IT Security Enterprise
To learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Register for InformationWeek Newsletters
White Papers
Current Issue
IT Strategies to Conquer the Cloud
Chances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.
Video
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Flash Poll