First and foremost, I would like point out that a password policy is only as good as the settings that you select. For example, you could pay a company millions of dollars for the most secure password policy in the…
The FBI's Criminal Justice Information Services Division, known as CJIS, regulates and protects criminal justice information. Established in 1992, it represents the largest division in the FBI. Since it grants government agencies access to sensitive information such as fingerprint records…
We have noticed states facing an alarming amount of data breaches in the last few years, so they are adding stricter guidelines to help minimize more risks. Since states store vast amounts of data about citizens such as social security…
Adding a new SaaS provider to your organization involves quite a bit of research depending on the size and capabilities. Taking into account the threats versus the opportunities can be daunting. The SOC 2 compliance auditing method, introduced by the…
Let's talk about insurance and what it's actually intended to do. According to Google's dictionary, insurance has two meanings:
1. A practice or arrangement by which a company or government agency provides a guarantee of compensation for specified loss, damage,…
This topic might seem to alarm you since the fate of your company will be placed in the hands of your employees. When I talk to many prospective customers of nFront Security, I hear the common problem of end-users selecting…
Did you know that one in six people select their pet's name as their password?
To put this more into perspective, the last year the US Census was taken that categorized the US population into age groups was 2014.…
Every day when I speak to various members of IT departments that are interested in the nFront Password Filter, there are a few common topics that we speak about during our conversations. First, he or she will mention that they…
Humans are very predictable and unless we see our company's name plastered across every news channel and online search engine due to a data breach, we will probably assume our company's network is safe, and we are doing a decent…
Running a password cracker is a standard part of any security audit procedure. Password crackers generally work in 4 ways – (1) a brute force crack (2) a dictionary crack (3) a hybrid dictionary crack and (4) rainbow tables. The…