Blog Posts

  "Active Defense" has made a lot of headlines lately.  Most relate it to hack back.  The main complaint or concern by those against "Active Defense" and many of those just being cautious, is that without attribution of your attacker you could be hitting an innocent bystander.  I say bunk.  Attribution is not that important.  Read on.

  As a business owner do you believe you could identify all of the potential risks to your business?  Is cyber security or data breach one of those identified risks?  If yes what have you done about it?  If no, why not, is your security better than the Pentagon, CIA and the White House, because they got hacked.

At RSA Europe last week Davi Ottenheimer and I introduced our "Active Defense" package and how companies can take the fight to the hackers beyond their network.  Vigilantism?  No!  But you decide.  Here is the link the write up in the UK Register:http://m.theregister.co.uk/2012/10/12/active_defence/, or see the whole article here.

     Hacking has gotten more prevalent.  Businesses are under constant attack.  Current defenses aren't working.  More options are needed.  Active defense is one option and the discussion regarding the concerns needs to be started and moved forward.

Believe it or not you can actually lower the risk of a cyber incident and potentially reduce or eliminate your liability if a cyber incident or data breach does occur.  But, do not for one minute believe it will not happen to you!

You cannot allow employees to use personal mobile devices for work without a policy.  You are opening yourself to all sorts of complications.

Hacking back part II, can you argue I have no right to defend my networks against innocent compromised machines?

Risk Assessment, up dated security, and employee education are considered the key by the FFIEC (Federal Financial Institutions Examination Council).

Identifying and managing the risks within your business could minimize your liability and help lessen the chances of a catastrophic event such as being hacked.

Here is the abstract to my article, "Hacking Back In Self-Defense: Is It Legal; Should It Be?"  To see the entire article go to Global Knowledge where it is published.