Chris Mark in May 2014 TransactionWorld Magazine May 4, 2014
Posted by Chris Mark in Uncategorized.Tags: AT&T, Breach, Chris Mark, Data, data compromise, information, mastercard, PCI, Practice Director, QSA, security, visa
add a comment
You can Chris Mark’s (my) latest article in May, 2014’s edition of TransactionWorld Magazine. Titled “5 Common Security Practices that Put You At Risk” This particular article is about how common errors companies make in security and compliance and how to reduce the risk of compromise. By now we all recognize that 100% security can never be achieved. By following well established security practices you can can minimize the risk to which your organization is exposed.
Chris Mark in AT&T Network Exchange Blog February 20, 2014
Posted by Chris Mark in Uncategorized.Tags: AT&T, Chris Mark, cybersecurity, DSS, Exchange Blog, information, PCI, security
add a comment
As the AT&T PCI National Practice Director, I write and blog on numerous topics that I hope are of interest to those who have to protect data. Aside from the GlobalRiskInfo blog here I also publish some blog posts on the AT&T Network Exchange Blog. Please take a spin through. Also, there are a very large number of great writers on the AT&T Network Exchange Blog. Take some time and look through the other authors…
CyberEspionage (Again)…The Counter Terrorist Magazine February 19, 2014
Posted by Chris Mark in Uncategorized.Tags: AT&T, Chris Mark, cybercrime, cyberespionage, cybersecurity, PCI DSS, risk management, security
add a comment
In light of the continuing attacks against companies by Eastern European organized criminal groups, I thought it appropriate to remind everyone that state sponsored attacks are still a major issue. Here is a link to an article I wrote in The Counter Terrorist Magazine on the topic of CyberEspionage. “The economics of cyber-theft is simple: Stealing technology is far easier and cheaper than doing original research and development. It is also far less risky to the spy than historic cloak and dagger economic espionage.”
Chris Mark in February 2014 SC Magazine “The Need & the Challenge” February 14, 2014
Posted by Chris Mark in Uncategorized.Tags: AT&T, Chris Mark, cybercrime, information security, InfoSec, SCMagazine, security
add a comment
Chris Mark’s (this author) article “The Need and the Challenge” has been published in the February, 2014 edition of Secure Computing Magazine. The article focuses upon the need to define the term ‘security’ and the challenge associated with denoting such a term. Here is an intro “While used every day, the term “security” can be deceptively difficult to define and may contain various meanings to different people in divergent contexts. The industry at large seems to have adopted a stance of “I know it when I see it,” as opposed to objectively defining the concept. Unfortunately, this creates numerous problems for those who have a need to ‘secure’ data, or any other asset.” Continue reading here!
Chris Mark in September 2013 – SC Magazine (Interview and Article) August 21, 2013
Posted by Chris Mark in cybersecurity, Industry News, PCI DSS.Tags: AT&T, Chris Mark, cybercrime, cybersecurity, data security, SC Magazine, Secure Computing, security
add a comment
In the August, 2013 edition of Secure Computing Magazine (SC Magazine), I have an interview and article included. The interview is for the cover story called “Beyond the Checkbox; PCI DSS” and the article is called “Understanding Parallax and Convergence to Improve Security”. Below is an excerpt from the article..be sure to check them out!
“To address today’s threats, companies require a high degree of convergent perspective, information expertise, and coordination between personnel and groups. Previously, companies could “make do” with basic security controls such as firewalls, Intrusion Detection System (IDS), and anti-virus. Attempting to understand the threats facing an organization and analyzing risk was often an afterthought, as companies relied upon simple compliance matrices and lists of “best practices” to secure their environment. This is no longer sufficient to address the threats of 2013. A major mistake in information security implementation is what can be referred to as “security parallax.””
Global Security, Privacy, & Risk Management 