faulker051

Are proficient in BOTH PCI DSS compliance and cloud computing security? If yes, you can help Cloud Security Alliance as well as build your security reputation AND make some money in the process! Here is how: a few months ago, when I was still consulting , I have created a comprehensive full-day class on PCI DSS and cloud computing. More information is here and a brief description is pasted below: “The first ever class dedicated to assessing and implementing PCI DSS controls in cloud computing environments covers how to think of and how to do PCI DSS in various cloud computing environments. Focused primarily on people familiar with PCI DSS, it starts from the “hype-free” cloud computing facts and then delves into key scenarios where PCI DSS and clouds overlap in the real world . You will learn where to look while assessing such environments and what pitfalls and mistakes to avoid. It will also cover the shared responsibility between service providers and merchants in implementin...

Here is my next monthly "Security Warrior" blog round-up of top 5 popular posts/topics this month. Disclaimer : all this content was written before I joined Gartner on Aug 1, 2011 and is solely my personal view at the time of writing. “ The Last Blog Post! ” is obviously BY FAR the most popular post in August. It announces my departure from consulting business in order to join Gartner as a Research Director with SRMS team. “ Top 10 Criteria for a SIEM? ” is an EXAMPLE criteria list for choosing a SIEM.  Also see “ On Choosing SIEM ” which is about the least wrong way of choosing a SIEM tool – as well as why the right way is so unpopular. “ On SIEM Services ” is a quick overview of services that you really should be getting with that SIEM purchase “ Log Management at $0 and 1hr/week? ” is pretty much what it is. How to do log management under extreme budget AND time constraints? A very old post (2009), “ Log Management + SIEM = ? ", is about architecting SIEM togeth...