New answers tagged corporate-policy
If you have software developers and testers check out the courses at Pluralsight. Also troyhunt.com very useful.
Have a look at http://www.securingthehuman.org/ The newsletters are quite good. anddd http://www.cpni.gov.uk/advice/Personnel-security1/ They have reusable posters and other resources for awareness and training.
It's been a while since I last worked closely with Lync server, but while you can exercise quite a bit of control over the content of the conversations, I don't believe that it directly allows for Activesync style encryption policies. I sadly no longer have a configured environment to go digging on to verify that though, so take this answer with a large ...
The hostnames hr.company.com and testing-apps.hr.company.com will not cause proper browser security model segregation - it is possible for hr.company.com to set cookies than can be read by testing-apps.hr.company.com and testing-apps.hr.company.com will be able to set cookies on the hr.company.com domain. So you have to trust both hr.company.com and ...
Password management tools like Lastpass are storing your data on their servers which is what lead to their huge vulnerability earlier this year. While Lastpass may be great to use for home based machines, enterprise password managers do exist, and should reside in your infrastructure. There will be some who will debate: "the cloud is just as safe" to which I ...
Top 50 recent answers are included