Here at Pondurance, we advocate a “Plan, Act, Check, Do” approach to building and implementing an Information Security Management System (ISMS). Last week in Part 1 we talked about why you need an ISMS. Now we’re going to tell you how to build one. Building an effective ISMS (based on ISO 27001/27002) is a continuous [...]

Why You Need It A recent New York Times article by Nicole Perlroth referenced these words from an investigative report by security researchers at McAfee into a vast online espionage campaign called Operation Shady RAT. “I am convinced that every company in every conceivable industry with significant size and valuable intellectual property and trade secrets [...]