Search Results

Interestingly, I tend to see IT Security as a wholly enclosed and dependent subset of Information Security. As you can see from some of the answers even on this site, it is evident that the People, Pr …

A challenge, especially in the maturing world of Information Security, is that segregating IT security from the other disciplines makes it very difficult to manage a central risk register at board lev …

I think that is worthwhile, yes - as it still provides useful knowledge to someone who arrives here from a search engine. Accept the useful answers - develop the question if necessary, but either way, …

I agree with AviD on the professional vs end-user demarcation. I think the core assumption is that security professionals (or IT folks with a security responsibility) will be the ones coming here and …

I think migrating the core ones over is appropriate now, and will have the added benefit of driving more traffic this way. By core ones, I mean those which absolutely sit in the remit for security st …

I think there are a couple of reasons the stack exchange model can work well in the information and IT security profession: There is actually quite a small pool of experienced practitioners, so it i …

How about these 8: 3 failed password attempts Forensic Toolbox questions Q1 and Q2 Biggest Unsolved Problems Hardening server eg Linux Securing home office IP Spoofing PCI Reasonably representativ …

I wasn't around then either, so @AviD or @GrahamLee will have a better view, but I have seen a range of conversations, and these two questions I am pretty glad it wasn't just IT Security, as it is so …

@Iszi - I have corrected that instance. I think you are right in principle but so far it doesn't look to be too big a deal, so we can always just change it as and when we see the wrong one used. For …

Absolutely Iszi - while many folks do now use plugins to show the destination URL, the risk of a malicious link is too high. I think best way to handle it is to first comment, requesting the poster c …

Yes - CISSP in general is a professional certification, and CISSP holders are expected to be security professionals, so most questions should fit. In saying that, the only education questions we tend …

Am on my mobile right now so can't do a full check, but does this question on meta.so answer your query? https://meta.stackexchange.com/q/22184/154443 Generally meta questions which will be generic …

I tend to err more on the side of being inclusive for anything that comes under the wider 'Information Security' banner for three reasons: The other Area51 proposals covering physical security seem …

Meme: Eat everything Originator: @AviD Cultural Height: August 2011 Background: Following on from Wildebeest and other discussions, topic #1 in the DMZ became not security, but food, and just what we …

Your simplest way to do this - post a bounty on it. If you’ve asked a good question, edited it with status and progress updates, and still are not receiving answers, you can draw attention to your qu …