Richard Stiennon

No amount of scary headlines or warnings issued by security experts and government agencies has the impact of the sure knowledge that you have been targeted. Would you change your IT security posture if you knew someone or some organization was after your data?  In fifteen years of talking to people about improving their security, I repeatedly hear the response “but we are just a <insert benign industry here> who would want our data?”  Industry by industry, organizations have learned the hard way that their data is valuable to someone.

A recent question I received from a journalist who was frankly perturbed by the spate of successful attacks: “How can companies protect themselves from targeted, socially engineered attacks?”