Identity & Access

Privileged account management solutions

Privileged accounts like System Administrators and Network Administrators have elevated privileges in a system. Capabilities such as unlimited access, bypassing the audit function etc are part of these accounts. This…

Binoy KL March 8, 2014

Identity & Access PCI DSS Compliance

Dual Control or Segregation of Duties?

Many information security professionals, event at the senior level roles, are still getting the internal control mechanisms such as Dual Control and Segregation of duties wrong. I often see that…

Binoy KL April 12, 2012

Identity & Access PCI DSS Compliance

PCI DSS compliance and Password policy

Usernames and passwords is still the major method of authenticating users to the systems. It would be difficult to find someone without a user name and password in the workplace.…

Binoy KL March 26, 2012

Identity & Access

10 resolutions for New Year 2012

All of us take resolutions in the new year. What is followed and what will be left out are points of discussion beyond this post, however, most of us make…

Binoy KL December 31, 2011

Identity & Access

Hack attack underscores danger of reusing passwords

The fallout from a hacking attack on Gawker Media Inc. a week ago underscores a basic security risk of living more of our lives online: Using the same username and…

Binoy KL December 28, 2010