NoShut.com Home NoShut.com
Alan Expressions
Insightful, delightful and entertaining some of the time.
May 2013
Sun Mon Tue Wed Thu Fri Sat
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31  
< Apr   Jun >

[Recent Entries]
[Entry Index]

Recent Entries
Topics
Other Blogs
Powered by PolarBlog
RSS 2.0 Feed

Valid CSS!
Valid XHTML 1.0!
Valid RSS!
Topic: Technology   Things I learned at SANS 2010 - Thursday Edition
02:43AM March 12, 2010
1. Every reaction to a situation can influence others to think of your organization as “good” or “bad”. Being open, transparent and taking responsibility quickly comes off much better than shutting down, seeming closed and acting slowly. Your organization needs to assure that at the end of the day people have a positive view of you, even if it means fessing up to major mistakes or wrongdoing.

2. Don’t tamper with a pre-existing records, especially logs and the like - rather than edit a pre-existing record, create a new one referencing the old one and the corrections you have. By doing it that way if the records are ever questioned it will not appear that they were tampered with.

3. Many civil actions and investigations (read: no jail time) can become criminal easily (read: jail time) if there is any evidence of fraud, tampering or misrepresentation.

4. Modern Auditors have a responsibility not only to validate things are correct and in order, but to also look for suspicious activity and ask questions which will help them locate fraud.

Plus over the last few days I’ve added a couple of new books to my to-read list: The Naked Corporation and Geekonomics.

One other thing I should mention is our class is taught by Ben Wright, who is a awesome instructor. It’s rare that you get a instructor who is as energetic and communicating as well on day four as he is on day one.

Friday Edition
Main Blog
[Permalink]   [Google]   (247 Words)

Topic: