If you’re a fan of magic, as I am, you’ll likely appreciate a technique called psychological misdirection.
Many magic tricks rely on physical misdirection - waving a cape or some other distraction that momentarily takes your eyes away from where the “magic” is happening.  And then suddenly there’s a pop, smoke appears, and out jumps a [...]

A few days ago I read a paper on DLP that caught my attention for the wrong reason.  The paper was by a reputable vendor.  It laid out a number of steps to secure confidential data, and generally speaking was “okay” as far as vendor papers go.
Note: I’m deliberately omitting the vendor’s name to avoid [...]

As Data Loss Prevention (DLP) emerges as one of today’s hottest technologies, it remains among the least understood.
Organizations continue to invest in tools and processes that make information available and portable.  This availability risks leaking confidential data into the public domain and potentially the hands of competitors.  This year alone I’ve met with more than [...]

Late yesterday CNET reported that Google’s hosted service JotSpot (a wiki) exposed user names and email addresses openly on the Internet.
Read the CNET article: http://news.cnet.com/8301-1009_3-10079805-83.html?tag=newsEditorsPicksArea.0
By itself, this really isn’t a big deal beyond the fact that it was Google that had the problem.  But it does raise a concern about the security of hosted apps.
People [...]

Many people ask whether data loss prevention is a lost cause because of its perceived complexity.  Just today I was speaking with a reporter about the technology and one of her first questions was, “how long does it take to get up and running.”  I get this question often and I always preface my response with, “well, [...]