Business Continuity — News

AusCERT 2013: Interview with Dr Lizzie Coles-Kemp

By Richard Chirgwin | 24 May, 2013 10:41

Dr Lizzie Coles-Kemp is a senior lecturer in the Information Security Group, Royal Holloway University of London. She is keenly interested in how social behaviours influence our attitudes to security. For example, in communities where Internet accounts need to be shared between family members, the security professional's assumption that one account and password identifies one person is undermined. CSO spoke to Dr Coles-Kemp about the nexus between social behaviours and information security.

AusCERT 2013: Home-electronics gear’s UPnP as insecure in Australia as rest of world: Metasploit

By David Braue | 22 May, 2013 21:10

Australia’s Internet space shows the same distribution of vulnerable IP ports as the rest of the world and a dangerous preponderance of insecure Universal Plug ‘n’ Play (UPnP) devices, Metasploit Project founder HD Moore has warned while recounting the surprising results of his efforts to catalogue the results of communicating with every IP address on the Internet.

Symantec targets mid to large businesses with Backup Exec 3600

By Patrick Budmar | 17 December, 2012 14:40

After being announced in the US earlier this year, Symantec’s Backup Exec 3600 makes its way down to Australia.

The week in security: Huawei, ZTE, Galaxy Tab deemed unacceptable for business use

By David Braue | 15 October, 2012 11:59

How much damage could a malware infection do in your company? A new study found that cyberattacks cost an average $US8.9m to clean up. This, in the context of a relentless exposure profile that saw Windows 7's malware infection rate climb by up to 182% this year.

The week in security: Govt targets cybercrims; cybercrims target banks, unis

By David Braue | 08 October, 2012 17:40

Workers have been agitating for bring-your-own-device (BYOD) strategies for some time now, but a new survey suggests many are actually concerned that BYOD – which has already raised security issues and is forcing companies to invest in sophisticated analytics – is giving management an excuse to snoop on their information.

The week in security: Was it the FBI's Apple data, or not?

By David Braue | 13 September, 2012 12:40

Reports were questioning corporate security culture as KPMG suggested a lack of legislation around mandatory data breach notifications has left many Australian companies tight-lipped on the subject.

Part 3 Business Continuity and implementation

By Mike Ryan | 11 September, 2012 11:50

By implementing a national multi-factor authentication system Australian citizens will benefit from having the highest levels of online security in the world. This technology may provide a significant competitive advantage to business in securing digital assets and could lead to innovation based export opportunities. The headlines report massive breaches of information that directly expose our financial systems to grave risk. Australia must set the benchmark in secure digital vigilance to safeguard our information security perimeter from existing and potential threats.

How CIO's meet growing security threats

By CSO staff | 20 August, 2012 11:33

When it comes to protecting enterprise data, CIOs and CSOs are at a crossroads. The complexity and prevalence of security threats continue to grow, bolstered by consumer IT and mobility. The open nature of IT has paved the way for far more sophisticated attacks—beyond conventional credit card data theft to multilevel attacks. Information security executives face perhaps the toughest challenge of their careers.

Backup, DR part of security processes: Telsyte

By Richard Chirgwin | 27 July, 2012 10:01

It's high time for enterprises to stop viewing backup and business continuity as separate from their security environment, according to Telsyte analyst and former journalist Rodney Gedda.

Auscert 2012: Day 2 Roundup - Roll your sleeves up its Gala Day

By CSO staff | 17 May, 2012 18:36

Today's sessions through the eyes of IT Security journos Richard Chirgwin and Hamish Barwick at Auscert 2012.

The in-depth guide to data destruction

By Bob Violino | 07 February, 2012 02:21

A key part of any information security strategy is disposing of data once it's no longer needed. Failure to do so can lead to serious breaches of data-protection and privacy policies, compliance problems and added costs.

Symantec releases faster next-gen NetBackup, Backup Exec software

By Lucas Mearian | 07 February, 2012 00:26

Symantec on Monday unveiled new versions of its flagship NetBackup enterprise-class and Backup Exec midrange backup applications -- Backup Exec 2012 and NetBackup v7.5.

Windows 8 can scrub data from disk, but not up to tough security specifications

By Tim Greene | 05 January, 2012 10:39

Windows 8 includes a reset function that restores the operating system to a clean state and scrubs data applications from the disk, but falls short of making that data unrecoverable, according to Microsoft.

How to implement a successful security and disaster recovery plan

By Philip Owens | 22 December, 2011 10:36

Although security issues are often top of mind for many organisations, they are often not considered as part of a disaster recovery (DR) plan.

Reloaded: Paying Lip Service to Incident Response

By Drazen Drazic | 12 December, 2011 09:39

"It will take a massive incident for our company to wake up to itself!" How often do you hear that in the information security industry? All the time -- so what generally happens when things go horribly wrong after the "incident" occurs?

Security Manager's Journal: A rush to judgment on DLP deployment

By Mathias Thurman | 06 December, 2011 02:45

I got most of what I asked for, and I got it early. Sounds good, right? Not so much.

Naming names in APT

By Bob Bragdon | 06 December, 2011 02:59

Let's call a spade a spade: China is the greatest threat to international cyber­security on the planet.

USB sticks still being used insecurely, Ponemon study finds

By John E Dunn | 27 November, 2011 01:42

USB sticks remain a big security weakness for many UK organisations with many employees using drives for data transport without permission and not bothering to report their loss, a Ponemon Institute study has found.

BC/DR spending not a top budget priority

By Joan Goodchild | 02 November, 2011 06:48

Organizations continue to spend on business continuity and disaster recovery, but BC/DR is still not a budget top priority, according to newly-released data from Forrester Research.

Security roundup: BlackBerry blows up; the 'dual-persona' mobile device?; more on the RSA hack

By Ellen Messmer | 15 October, 2011 05:34

Confidentiality, integrity and availability are oft-mentioned goals of security, and that being the case, this week's lack of service globally for the BlackBerry constitutes a profound security collapse.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Email Security and Data Protection

Encrypt your sensitive email

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.