Content by Tom Field

Legal Merits of 'Hack Back' Strategy

Tom Field  •  December 10, 2012

From point-of-sale hacks to malware and DDoS attacks, the top cyberthreats of 2012 have been aggressive and strong. Is it time for organizations to adopt a "hack back" strategy against perceived attackers?

Privacy vs. Security: A Dialogue

Tom Field  •  December 4, 2012

McAfee CPO Michelle Dennedy and Intel CISO Malcolm Harkins work for the same company, but in some ways they are worlds apart. How must privacy and security leaders bridge gaps to face challenges ahead?

Inside a Forensics Investigation

Tom Field  •  November 21, 2012

What are the key skills and tools forensics pros use in probing a data breach? What can we learn from recent breaches? Rob Lee of SANS Institute walks us through a typical forensics investigation.

Top 4 Cyberthreats of 2013

Tom Field  •  November 16, 2012

Cloud-based botnets and mobile malware are two of 2013's top cyberthreats. What other threats make the list? Georgia Tech's Paul Royal tells how security pros and organizations can prepare.

Social Media: Reassess Your Strategy

Tom Field  •  November 9, 2012

Social media platforms are ever-evolving. But organizations' and individuals' use of social media has not evolved and may create new risks, says educator Sherrie Madia. How should we manage these risks?

President Obama's Unfinished Business

Tom Field  •  November 7, 2012

If President Obama's second term were a movie sequel, I'd call it "Unfinished Business." It's time to step up and see through the cybersecurity initiatives Obama spoke about when he first took office.

Sandy: Focus on Disaster Recovery

Tom Field  •  October 30, 2012

Hurricane Sandy threatened buildings, staff and data alike. But it also challenged business continuity pros to be leaders. Disaster recovery expert Regina Phelps discusses seven critical skills.

Storm Prep Key to Recovery

Tom Field  •  October 30, 2012

It's been compared to the 'perfect storm,' but Hurricane Sandy is unlike any storm we've seen, says Alan Berman of DRI. He believes organizations have planned well for recovery.

CISO's Challenge: Security & Risk

Tom Field  •  October 23, 2012

CISOs increasingly are asked to manage both information security and risk. What new skills and tools do they need to juggle the dual role? David Sherry, CISO of Brown University, shares his views.

Ira Winkler on ISSA's Future

Tom Field  •  October 10, 2012

Cybersecurity thought-leader Ira Winkler has been appointed new international president of the Information Systems Security Association. What are his goals to grow the organization and its influence?

Windows 8: A Security Upgrade?

Tom Field  •  October 3, 2012

Windows 8 is coming soon. What are the security updates in Microsoft's new operating system? Which questions should security leaders weigh before upgrading? Forrester's Chenxi Wang offers insight.

iPhone 5 and Next-Gen Mobile Security

Tom Field  •  September 14, 2012

The iPhone 5 is coming, and so are a slew of new or upgraded smart phones and tablets. How should security leaders prepare for this new wave of mobility? Malcolm Harkins, CISO of Intel, offers advice.

Insider Fraud: The 'Low, Slow' Approach

Tom Field  •  September 4, 2012

Which employees are most apt to commit cyberfraud, and how can organizations detect and prevent their crimes? Researcher Randy Trzeciak shares insights and tips from a new insider threat study.

Mitigating Messaging Risks

Tom Field  •  August 27, 2012

E-mail, IM, text messaging - we all increasingly depend on messaging technologies. And so do the fraudsters. Craig Spiezle of the Online Trust Alliance discusses how to mitigate our vulnerabilities.

Talking Security with the Board

Tom Field  •  August 24, 2012

Information security leaders increasingly take risk concerns to their boards of directors. But do they accurately articulate their messages? Heartland Payment's CSO warns of the most common mistakes.