Think your outsourced supplier or method of paper shredding is secure? See these photos and think again!

Details

Category: Cyber Security (Personal)

Whenever I am out on the street, abroad or at home, working or on holiday I always spot funny in-secure situations and take a photo if possible. Below are just four stories on the lines of outsourced shredders and there are many more stories on other topics including photos.

Story #1 outsourced on-site shredding into massive chunks
At a place I was working at in London they had 2-3 shredder bins on each floor and they were always locked though at times overflowing which meant you could pinch paper out of them. Every week or two a lorry would come along and a security guard would escort the driver to collect each shredder bin in the building and take it to the lorry in the gated car park. One day I asked facilities how does this work and they gave me the name of the company. It was a big company with ISO 27001, ISO 9001 and two other ISO’s related to environmental standards. Great I thought – not that I fully respect companies which are certified.

Read more …

HMRC phishermen or phisherwomen can you please spoof the sending domains to make it more convincing at the very least

Details

Category: Blog

The email is ok but sending from myphotoquotes.com gives it away a bit.

Personal and maybe a little controversial article: What is missing in cyber security? Doing as you preach

Details

Category: Cyber Security (Personal)

Doing as you preach is not solely related to cyber security. Pick any topic and it is barely followed. Politics: speeding and getting your wife to take the points. Talking about morally repugnant investment methods and likely a lot of wealthy politicians having money stashed in the Channel Islands. Religion: following all the rules of the religion and dodging VAT & tax. Appearing religious but drinking and using prostitutes. And many more stories but I don’t want to “side track” to much.

The whole point of cyber security products and services is to secure your clients. From offering off the shelf products, security architecture design or pen testing. Yet behind the scenes are the individuals doing as they preach at home and in the office, and is the business itself actually half secure? Remember the “late” HBGary which was a U.S cyber defence firm and sold products and services to three letter U.S agencies, and the private sector.

Read more …