Security Screen Saver

Seldom I come across any screen saver for security. Today, when I clean up some of my old files, I discovered an old screen saver I downloaded from Microsoft, "The 10 Immutable Laws of Security Administration". 

• Law #1: Nobody believes anything bad can happen to them, until it does 
  
• Law #2: Security only works if the secure way also happens to be the easy way 
  
• Law #3: If you don't keep up with security fixes, your network won't be yours for long 
  
• Law #4: It doesn't do much good to install security fixes on a computer that was never secured to begin with 
  
• Law #5: Eternal vigilance is the price of security 
  
• Law #6: There really is someone out there trying to guess your passwords 
  
• Law #7: The most secure network is a well-administered one 
  
• Law #8: The difficulty of defending a network is directly proportional to its complexity 
  
• Law #9: Security isn't about risk avoidance; it's about risk management 
  
• Law #10: Technology is not a panacea 
  

If I remember correctly, the screen saver was released in December 2000 (8 years back). You can download it from Microsoft Security Screen Saver.

How Not to Be Clueless CIO

An interesting article about the 9 reasons why developers think the CIO is clueless.

As CIO, you hold one of the most important executive positions in your company. And, to lead successfully, you must earn the respect of both the business and your information technology organization. But earning the respect of application development professionals is no easy task: The CIO position has been a revolving door as of late and many application development professionals have become cynical.

>>> http://blackwhiteforest.blogspot.com/2008/08/nine-reasons-why-application-developers.html

Other readings:

• Top 10 of CIO Mistakes
  

The Challenge of Virtualization Security

This is one of the excellent articles that I've seen this year. It is great, and it tells the root cause for most of the problems we faced nowadays.

The real problem of security in a virtualization world is not technical, it is organizational and operational.

With the consolidation of applications, operating systems, storage, information, security and networking -- all virtualized into a single platform rather than being discretely owned, managed and supported by (reasonably) operationally-mature teams -- the biggest threat we face in virtualization is now we have lost not only visibility, but the clearly-defined lines of demarcation garnered from a separation of duties we had in the non-virtualized world.

See the full article at:
>>> http://rationalsecurity.typepad.com/blog/2008/03/the-challenge-o.html

Top 10 of CIO Mistakes

Interesting article about the 10 mistakes that CIO consistently make to weaken enterprise security.

How many of them you find in your own company?

http://blackwhiteforest.blogspot.com/2008/02/cios-top-10-mistakes.html