A Q&A with David Wolpoff, Kyrus Technologies
Supervisory control and data acquisition (SCADA) systems are industrial computer systems that monitor and control industrial or infrastructure processes. Recently, two hacking incidents at water utilities in Illinois and Texas have exposed their vulnerabilities. To get a better handle on how companies using SCADA systems can better protect them from malicious attacks, I spoke with David Wolpoff of Kyrus Tech.

A Q&A with Amit Trivedi, Healthcare Program Manager for ICSA Labs
When the American Recovery and Reinvestment Act of 2009 was signed by President Obama on February 17, 2009, it included the Health Information Technology for Economic and Clinical Health (HITECH) Act, which calls for programs under Medicare and Medicaid to provide incentive payments for the “meaningful use” of certified electronic health records (EHR) technology. I spoke with Amit Trivedi, healthcare program manager for ICSA Labs, an independent division of Verizon that’s involved in the certification and testing process for health records, about the concept of “meaningful use” and HITECH’s ramifications for data security.

A Q&A with John Mullen, Nelson Levine de Luca & Hamilton, LLP
The hours and days following the initial discovery of a breach are full of confusion and chaos. However, companies can save themselves from a lot of trouble later on down the line if they stay focused. We spoke to lawyer John F. Mullen Sr. of Nelson Levine de Luca & Hamilton, LLP in Blue Bell, PA, about dos and don’ts for companies in this situation—mostly don’ts.

A Q&A with Branden Williams, CTO of Marketing at RSA
SQL (Structured Query Language) is a standardized language for interrogating relational database systems, which are found in most companies for business applications (especially web-facing apps). SQL injection is one of the most common technical exploits used to perpetrate the theft of sensitive information. To understand a little bit more about how it works and how companies can prevent it, I spoke with Branden Williams, CTO of Marketing at RSA, the security division of EMC in Dallas, TX.

A Q&A with David Navetta, Founding Partner of Information Law Group
When an organization outsources their computing or allows a third party to retain care, custody and control of their private data, they are exposing themselves to risk. I talked to David Navetta, founding partner of Information Law Group, about the precautions that organizations can take to protect themselves from vendor mishaps.

A Q&A with Robert Krauss, Partner at Director of Enterprise Sales and Alliances at BitDefender
Whether they are looking for robust third party business applications, cost-effective storage, or saving on IT operational maintenance, businesses are increasingly thinking about outsourcing their computing to the cloud (i.e., remote computing and storage environments). As cloud technology is gaining some acceptance, however, organizations should be aware of the risks that it poses. I spoke to Robert Krauss, director of enterprise sales and alliances at BitDefender, about some basic security concerns and strategies for safe cloud usage.

A Q&A with Jon Neiditz, Partner at Nelson Mullins
As part of an ongoing series of posts, I’m talking to experts in the field about the true costs associated with “crisis” data breach response services. Today we’re looking at legal counsel, and I spoke with Jon Neiditz, partner at Nelson Mullins and the founder and coleader of its Information Management practice.

A Q&A with Chris Novak, Managing Principal at Verizon Business
As part of an ongoing series of posts, I’m talking to experts in the field about the true costs associated with “crisis” data breach response services. Today we’re looking at computer forensics, and I spoke with Chris Novak, managing principal at Verizon Business.

A Q&A with Rick Kam, President and Co-founder at ID Experts
As part of an ongoing series of posts, I’m talking to experts in the field about the true costs associated with “crisis” data breach response services. Today we’re looking at credit monitoring, and I spoke with Rick Kam, President and Co-founder at ID Experts, which offers a spectrum of data breach response services including identity monitoring and recovery for healthcare, government, enterprise, education and financial service organizations.

A Q&A with Larissa K. Crum, Executive Vice President at Immersion, Ltd.
As part of an ongoing series of posts, I’m talking to experts in the field about the true costs associated with “crisis” data breach response services. The first focuses on notification, and I spoke with Larissa K. Crum, Executive Vice President at Immersion, Ltd., which provides printing, mailing, emailing, call center, and returned mail management services. <a href="”> Read More…