Articles

The Other Side of Trust

The National Security Agency (NSA) defines a trusted computer system or component as one "whose failure can break the security policy", and a trustworthy system or component as one "that will not fail". A trusted system therefore is one where 'trust' is used to describe a role, irrespective of whether a system is able to perform adequately in that role, whereas 'trustworthy' is used to describe the adequacy of a system to perform as expected. In both cases 'trust' is effectively used as an acronym for security, although 'trustworthy Computing' according to Microsoft's Bill Gates is broader - 'What I mean by this is that customers will always be able to rely on these systems to be available and to secure their information.'

CSI Survey 2008 Published

The Computer Security Institute (CSI) Survey for 2008 has been published and can be downloaded from their web site.

Privacy

There's an excellent series of articles on privacy in the August 2008 edition of Scientific American. How privacy can be threatened by new technology is only one aspect that is explored.  The other is a compelling case that the solution to address  most of our fears on privacy loss is to let people, through regulatory means, have the power to exercise more control over their own personal information.

Governance Think Tank Notes

Attached are notes from the first chapter think tank, where we considered the definition of governance.

Members are invited to propose a think tank topic, which can be on anything relevant to assurance, security, and governance, including issues that you are personally tackling in your organisation.

The format of think tanks is that the proposer presents a topic or issue for 5 to 10 minutes followed by discussion. This is a superb opportunity to exchange ideas and experiences and to essentially bring a collection of brainpower to bear on a subject.


Syndicate content

© Copyright 2007-2009 ISACA Wellington Chapter, All Rights Reserved

Powered by Drupal - Theme design by artinet