Jeremy’s Brain Dump

Here is the first part of an article I wrote that tries to explain what the Federal Information Security Management Act is. It gives a brief overview and the starts through the 7 steps.

Here is an article I wrote regarding the basics of Access Controls. It deals mostly with AC in Information Assurance.

How do you define security? To some people, firewalls immediately comes to mind. To others, process and procedures are the first things they think of. Other people think about guards and guns.

I like to think of security as risk management. A vulnerability exists. This is a possible flaw in your system. A threat exists. This is something to take advantage of the vulnerability. This is your threat vulnerability pair. When you put these together you get your risk. To protect yourself you need to mitigate and manage this risk. (Continued)

A CISSP is a certification given out by ISC2.org. They state:

As the first credential accredited by ANSI to ISO Standard 17024:2003 in the field of information security, the Certified Information Systems Security Professional (CISSP®) certification provides information security professionals with not only an objective measure of competence but a globally recognized standard of achievement. The CISSP credential demonstrates competence in the 10 domains of the (ISC)² CISSP® CBK®.

So, it is a internationally known information security certification. It is generally recognized as one of the toughest and most comprehensive security certifications out there. However, it is not necessarily a technical certification such as a Checkpoint certification or a Bluecoat certification. It covers a broad spectrum of topics. In fact, it covers 10 domains of information as you can see in the quote above. (Continued)

It looks like there are some security flaws with Wordpress. It is time to upgrade to the newest version.

The upgrade is pretty simple. Just overwrite your existing wordpress directory with the new files. (You should probably take a backup first, however.) Then, access your dashboard. It will finish the upgrade for you at that point.