Security Compliance Associates (SCA) will conduct an evaluation of the measures the institution employs to provide for the physical security of the institution's information systems as well as consumer information and vital records maintained on other media, i.e. paper, microfiche, CD's, flash drives, etc.
SCA will review and assess the client's deployment and use of alarm systems, surveillance systems, access controls, vendor/visitor controls and oversight and management of couriers and janitorial personnel.
SCA will review and assess eleven key issues within three broad areas critical to effective data facility security. They are:
Administration
- Identification
- Courier/Message Service
- Janitorial Services
- Access Controls
External Conditions
- Exterior Lighting
- Roof Access
- Air Ducts
- Exterior Doors
Vital Records and Information Security
- Server Room
- Media Storage and Protection
Keeping in mind the phrase, "you're only as strong as your weakest link". SCA will attempt to penetrate non-public areas of the facility during and after business hours, attempt to gain access to employees' computers, attempt to gain access to sensitive documents and information stored on other media and will conduct e-mail phishing to test and evaluate employee security awareness and response within the scope proper company and compliance.
Microsoft yesterday issued 13 security updates that patched 22 vulnerabilities in Internet Explorer, Windows, Office and other software, including one that harked back two decades to something dubbed "Ping of Death."
Microsoft released 13 security bulletins, patching 22 vulnerabilities across its product line, including two critical updates affecting Internet Explorer and the Windows DNS Server. While Microsoft issued fewer updates this month, August was still marked as a busy month for system administrators.
Hackers flying the AntiSec banner today released what they said was 400 megabytes of internal data from a government cybersecurity contractor, ManTech, as part of their campaign to embarrass the FBI every Friday, as well as target other government agencies and their partners.
The U.S. Attorney's Office in Houston has brought charges against four men for stealing more than $400,000 as part of an ATM skimming scam targeting local banks.
Morgan Stanley Smith Barney is the latest company behind Sony and Epsilon to have its customers' personal data compromised.
A gang that made more than $72m (£45m) peddling fake security software has been shut down in a series of raids.
