Guest lecturing at the Norwegian school of Management

Submitted by Kai on Fri, 2008-09-05 13:21.

I have received an invitation to do a guest lecture on information security at the Norwegian school of management BI again this year. You may recall that I did this last year too (more, and more).

As I did last time, I would love to have your ideas and inputs as to what I should focus on. Last year, I made it an interactive workshop around the TJX case. It worked great, and I got great feedback. This year I was thinking along the lines of black PR, and how to deal with it from a company view.

What are your thoughts on that? Is it a viable security issue from a company view? Are there any well known cases out there?

Kai's blog

OPSEC

Submitted by Kai on Tue, 2008-09-16 08:46.

Scott, I am not very familiar with OPSEC, but I will take a look at it.

Social networks and the Internet in general is an interesting study with regards to bits and pieces of information let loose. You do not need to be very clever to start collecting and analyzing these bits - as a matter of fact, Google and other search engines will help you out pretty well.

Thanks for the tip, I will look into this as an angel!

And I will pop by your streetwise security zone!

What about a slight twist on the Black PR thing... OPSEC?

Submitted by Scott Wright (not verified) on Sat, 2008-09-06 22:25.

As a security management coach, I think one of the biggest risks businesses overlook is the information that leaks out of their organization that could be used for Black PR, phishing, or social engineering attacks against them. Protecting information that, in isolation isn't that sensitive, but which could be aggregated to become sensitive as a whole, is often called Operational Security (or OPSEC). There are probably many case studies you could use in this area. I would like to do workshops and keynotes on this type of topic, as well. It looks like we have similar interests in this sense. You might be interested in a couple of websites I've set up, which are best reached via my new site for small business security called The Streetwise Security Zone at http://www.streetwise-security-zone.com Best of luck in the conference. Maybe I'll see you there someday! - Scott