Internet Security Alliance News & Information Security Resources

 

From The Internet Security Alliance

In The News…

July 24, Orange County Register – (California) FBI to investigate Placentia library hacking. The FBI is hunting down the hackers that hijacked the Placentia Public Library Web site the morning of July 24, a bureau official said the same afternoon. “The FBI will open and investigation into this incident,” said an FBI spokeswoman. The spokeswoman, who works out of the bureau’s Los Angeles field office, said that the FBI has a special unit that investigates “cyber crimes, computer intrusions, defacements, more traditional crimes like fraud and child exploitation.” Visitors to the Placentia Library Web site were greeted by an image of a flapping flag with a crescent moon and star behind a portrait of famed Turkish leader Mustafa Kemal Ataturk. Underneath was the phrase “Editaarruz is back.” A group calling itself the “Federal Attack Team” has apparently hacked www.placentialibrary.org — disabling the site completely. The word “taarruz” means “attack” or “offensive” in the Turkish language.
Source: http://www.ocregister.com/articles/site-web-search-2506225-google-placentia

Internet Security Alliance News 7-29-09 : Information Security Resources

Technorati Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

del.icio.us Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

IceRocket Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

BuzzNet Tags: 2009,access,Anthony M. Freed,Apple,audits,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,cyber security,cybersecurity,cybersquatting,D and O liability,Data,DDoS,defense industrial base,DHS,DIB,DMCA,docs,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,governance,Government,hackers,Host,ICANN,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,ISA,ISR,Kevin M. Nixon,law,lawyer,legal,liability,malware,management,News,phishers,privacy rights,protocol,regulations,regulatory,risk,Security,software,spammers,System,systems,third party,valuation,vendors,zero day attack

Securing a Hacker-Free Zone on the Internet

 
By Jacqueline Herships, Founder of Jacqueline Herships & Associates
(This article was first published in the Gerard Group International, Inc. newsletter “INTELANALYSIS”.)

Patented Telecommunications Plan Would Create Secure VoIP Communications

A recent patent series promises a new, secure telecommunications system by mitigating risks to Internet telephony like Voice over Internet Protocol (VoIP) from espionage, hacking, intrusion, and interruption of service.

The entire worldwide Domain Name System (DNS) was brought to its knees by hackers not too long ago; however, this new Internet telecommunications system will not depend on DNS.

In theory at least, the Wild West days of Internet telecommunications are over.

Based upon the inventions articulated in his five-patent suite, inventor Harry Emerson III, has mapped out a union between our secure and venerable telephone system - (Plain Old Telephone Service; a.k.a., POTS) - and the hyper-evolving, media-rich Internet which is so famously not one bit secure.

As it evolves, he believes this next generation telecommunications system, dubbed IronPipe™, will have huge implications for national security as well as tremendous new revenue opportunities for the carriers and supply chains which serve them.

Conceived in response to what he views as the seriously flawed paradigm, which is currently developing as telecommunications migrates to the Internet, Mr. Emerson says he designed IronPipe™ to offer an alternative with a high degree of security.

The Internet has produced something akin to a gold rush experience for those mining its resources and developing its vast potentialities, he said.

However, in the midst of this frenzy, he has observed that fundamental requirements of privacy, secrecy, and security are seldom openly discussed when it comes to Internet-based phone services known as Voice over Internet Protocol (VoIP) systems such as Skype, which are proliferating in cyberspace.

These are serious issues, he maintains, and they need to be fully considered by users such as corporations, telecommunications carriers, VoIP carriers, law enforcement agencies, and federal and state governments, as well as by the millions of Internet using individuals who are concerned with their own personal privacy.

According to Mr. Emerson, our current state of vulnerability came about because we have turned a blind eye to these issues of privacy, secrecy and security, combined with the scramble for profit, and an unregulated environment for VoIP.

“The Internet is a lawless frontier where nothing is safe and secure and reliability is always one step away from calamity,” he says.

“As things stand today, VoIP does little to protect the interests of the aforementioned entities, not to mention protecting the security of the United States. We are suffering untold numbers of hacker attacks DAILY, with systems broken into and identities stolen. Not too long ago the entire worldwide DNS system (Domain Name System) was brought to its knees by hackers,” Emerson said.

In his opinion, if the technology continues to develop in its current direction, no one will be able to guarantee that communications cannot be intercepted and monitored.

In addition, if we examine our circumstances, a lot of the excitement generating the rush to VoIP is based upon an illusion, the appearance that we are being offered new and sophisticated technologies.

In fact, existing VoIP offerings are simply discounted POTS service, he says, with no value-added features, only lower cost caused by fierce price pressure from cable TV and other low-overhead vendors.

The result is the continued downward spiral on price that has plagued the telecommunications industry for 30 years.

IronPipe™ is a re-thinking of 21^st century telecommunications architecture, which will return a sense of safety to our society as a whole, reinvigorating our economy from the inside out.

If his vision is implemented, Mr. Emerson says we won’t have to put up with either the fear of intrusion or the huge financial burden of protecting ourselves from the ever-increasing army of those with malicious intent.

We will now have a choice.

The challenge is that VoIP companies such as Skype (NASDAQ: EBAY), Vonage (NYSE: VG) and the various Cable carriers (Comcast NASDAQ: CMCSA, Time Warner: NYSE TMC, and CableVision: NYSE CVC) , which have migrated to the Internet, did so not only to provide cheaper communications, but to avoid regulatory scrutiny.

“If you don’t have to deal with the regulations it tends to make it cheaper,” Emerson said, “but these profits come at a price.”

“The integrity of the communications system has been compromised because of this short term thinking geared towards reducing costs.”

In its simplest terms, IronPipe™ enables us to make Web 2.0 Internet-style media rich calls utilizing the existing private, protected, secure, Public Switched Telephone Network (PSTN), and its unseen private data network - known as Signaling System #7 (SS7), which connects all the main switches around the world.

While VoIP uses the Internet exclusively and thus can be, and regularly is, compromised by persons of malicious intent, if we establish Internet calls through these telephone company switches there will be no access from the outside.

We can create rich media visual telephone calls on broadband Internet connections, using wire-line or wireless touch-screen phones such as the Apple (NASDAQ: AAPL) iPhone, simply by dialing a phone number, and still enjoy the privacy, security and reliability of traditional telephone calls.

Mr. Emerson says that his technology seamlessly merges the best of the Internet with the best of the telephone network.

Considering the cost to government, industry and “society at large” to protect against intrusion and to remediate the damage caused by intrusion, IronPipe™ could be well worth looking into.

About Harry Emerson, Co-Founder Emerson Development LLC:

  Mr. Harry Emerson is an expert in computers, voice and data communications, and the Internet.

His career history includes 25 years in various sales, management, and strategic capacities at AT&T (NYSE: T) and the design and management of large-scale, multi-million dollar enterprise applications and data systems.

He has numerous patents issued and pending against a variety of technologies including FM radio, Internet streaming, PC software, and telecommunications.

Mr. Emerson co-founded GEODE Electronics to commercialize a series of patented enhancements to commercial FM radio. Subsequently, Mr. Emerson co-founded SurferNETWORK, an Internet streaming media business.

His background in switching systems and data networking, along with concepts he developed in corporate architecture and strategy positions, ultimately led to the development of the patent portfolio that defines the next generation of secure telecommunications, known as IronPipe™, featuring secure, rich Multimedia capabilities.

He is a member of the New Jersey Technology Council (http://www.njtc.org/) Telecommunications/Media Industry Network Advisory board.

Emerson Development, LLC has been awarded a fifth telecommunications patent that introduces breakthrough technology combining the multimedia capability of the Internet with the safety, security, and reliability of the phone network.

This exciting new technology enables a world in which audio/visual phone calls will become the standard for routine, daily communications. The Emerson Development Multimedia Telecommunications technologies will create the next generation of telecommunications — visual, multimedia, and videophone communications on screen-based phones that require no knowledge or training for users. Just dial a phone number.

Emerson Development Multimedia Telecommunications provides the carrier class infrastructure, operations, management, and billing capabilities that will be absolutely necessary for the major telecommunications companies throughout the world to venture into this field.

These mandatory capabilities include requirements for security, privacy, secrecy of communications, and unlisted numbers, including the guaranteed ability to keep the identities of callers secret under every circumstance imaginable.

In addition, just as importantly, Multimedia Telecommunications provides for these privacy and security requirements while still enabling government mandated provisions for law enforcement wiretapping and call tracing.

Overview of the Emerson Development, LLC Patents

Patent Number	Description
6,704,305	“Integrated Device For Integrating The Internet With The Public Switched Telephone Network” This patent, describes telephone devices such as screen phones that support audible and visual communications across the Internet simply by dialing a telephone number. These “Integrated” phones have both a telephone connection and an Internet connection. By using digital call control messages that are sent to and from the local telephone central office, an “Integrated” telephone can set up an Internet Multimedia call to a compatible phone. If the called phone is not Internet capable, a standard phone call is established.
6,700,884	“Integrating the Internet With The Public Switched Telephone Network” This patent, describes a system for a telephone device as described in 6,704,305 to be able to create an Internet call. The system includes a mechanism for correlating the telephone number of a calling or called device with its associated IP address. That information could be stored in the telephone itself, in a record system of the local central office, or in one or more central registries.
6,697,357	“Call Management Managing System For Integrating The Internet With The Public Switched Telephone Network” This patent describes a digital call management messaging system, that could be thought of as an extension of ISDN and SS7, that enables an “Integrated” telephone device to communicate across the Internet. When one of these telephones places a call, it sends a digital message to its serving central office switching system. That message includes its telephone number and IP address, as well as the telephone number of the called party. By sending a compatible message to the central office serving the called party, the originating central office can determine if the called party is capable of an Internet call. If so, once the called device receives the call setup message, it has the Internet IP address of the calling device, and can then establish a connection across the Internet.
6,928,070	“Integrating The Internet With The Public Switched Telephone Network” This patent, describes a sophisticated system, which greatly enhances the privacy, secrecy, and security of Internet calls. This system enables the telephone-switching network to dynamically assign an IP address to both the calling and called device, and route the resulting Internet call through an intermediate proxy server. Internet phones require more than just “unlisted number” capability since a called party can easily determine the geographic location of a caller, and thus putting the life of some individuals at risk (such as a battered spouse). With this invention, the proxy servers can be in other geographic regions to cloak a device’s actual geographic location. Furthermore, the Internet call can be split into two unidirectional streams, and each of those streams can be routed through a separate pair of proxy servers. Since the proxy servers can be dynamically selected for each call, the true location of an “Integrated” phone can be protected.
7,327,720	“Integrated Telephone Central Office Systems For Integrating The Internet With the Public Switched Telephone Network” This patent describes a telephone central office switching system having a digital messaging capability to send and receive call setup and management messages to and from compatible phones. These call management messages can initiate and control a communications session transpiring across the Internet. The central office switching system can communicate similar digital messages to other central offices and central office systems to create and manage end-to-end Internet communications.

Emerson Development, LLC’s IronPipe™ Benefits

Telephone carriers stand to benefit from this new technology because it preserves their business position by providing high value in the PSTN and in the underlying private SS7 network that connects the PSTN together.

Traditional telephone carriers, as well as VoIP vendors that participate in this new technology, will benefit by offering new high value consumer services instead of competing by cutting prices.

Consumers will benefit from a flourish of new Multimedia features. The experience will be similar to accessing a web page with a browser, but would be done by dialing a phone number.

Industry and governments will benefit from a rich communications environment that is secure from espionage, hacking, intrusion, and interruption.

Questions and comments for Mr. Emerson may be directed to:
Direct - (973) 641-7420 
Email - hemerson@EmersonDevelopmentLLC.com
Via LinkedIn: http://www.linkedin.com/in/harryemerson

Jacqueline Herships is the founder of Jacqueline Herships & Associates, a strategic communications and new business development company. Jacqueline developed her skills in the documentary film business, as a journalist, and as an organizer in her own right. She believes in the power of alliances and builds these into her strategic plans. In addition to her work with Emerson Development, Ms Herships’ client projects have included the US Green Building Council of New Jersey, the Sierra Club - NYC, the Local Initiatives Support Corporation Greater Newark & Jersey City (a funding agency for inner city community development), HANDS, Inc; Wildlight Productions, a critically acclaimed social issues documentary film company; and a variety of artists and arts projects. She is a workshop facilitator for the Support Center for Nonprofit Management in Manhattan and others on the subject of laser communications-developing attention in the age of information overload; she has twice been a member of the board of the International Furnishings and Design Association, IFDA/NY as well as their publicist for 2 years. And, she is the co-founder of Professionals in Media (PIM), a regional organization of media professional including writers, editors, publishers, filmmakers, consultants, etc., who meet across professional lines.

Comments and questions may be directed to: Jacqueline Herships & Associates: 
Direct - (973) 763-7555
Email - jacqueline@jacquelineherships.com

The Publisher gives permission to link, post, distribute, or reference this article for any lawful purpose, provided attribution is made to the author and to Information-Security-Resources.com

© Copyright 2009 – Jacqueline Herships – All Rights Reserved  

(This article may be reprinted in whole or in part only with proper attribution to the author.  See: Information Security Resources)

Technorati Tags: 2009,access,Anthony M. Freed,Apple,Breach,breaches,bypass,CableVision,class action,Comcast,computer,confidential,consumer product liability,control,Costs,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DDoS,DNS,DOD,Domain Name System,due diligence,Economy,electronic database,Emerson Development LLC,espionage,Finance,Financial,Financial Identity,Financial InfoSec,governance,hackers,hacking,Harry Emerson III,homeland Security,ID,identity thief,infiltrate,Infoduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,interview,intrusion,iphone,IronPipe,ISR,Jacqueline Herships,Kevin M. Nixon,law,legal,liability,Managed Security,markets,meltdown,misuse,national security,News,outsourcing,paperless,POTS,privacy rights,Public Switched Telephone Network (PSTN),Raytheon,regulations,regulatory,removeable devices,Report,risk,ROI,sabotage,Security,shareholder derivative,Signaling System #7,Skype,SS7,steal,System,systems,telecommunications,theft,third party,Time Warner,valuation,vendors,VOIP,Vonage,zero day attack

LiveJournal Tags: 2009,access,Anthony M. Freed,Apple,Breach,breaches,bypass,CableVision,class action,Comcast,computer,confidential,consumer product liability,control,Costs,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DDoS,DNS,DOD,Domain Name System,due diligence,Economy,electronic database,Emerson Development LLC,espionage,Finance,Financial,Financial Identity,Financial InfoSec,governance,hackers,hacking,Harry Emerson III,homeland Security,ID,identity thief,infiltrate,Infoduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,interview,intrusion,iphone,IronPipe,ISR,Jacqueline Herships,Kevin M. Nixon,law,legal,liability,Managed Security,markets,meltdown,misuse,national security,News,outsourcing,paperless,POTS,privacy rights,Public Switched Telephone Network (PSTN),Raytheon,regulations,regulatory,removeable devices,Report,risk,ROI,sabotage,Security,shareholder derivative,Signaling System #7,Skype,SS7,steal,System,systems,telecommunications,theft,third party,Time Warner,valuation,vendors,VOIP,Vonage,zero day attack

Flickr Tags: 2009,access,Anthony M. Freed,Apple,Breach,breaches,bypass,CableVision,class action,Comcast,computer,confidential,consumer product liability,control,Costs,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DDoS,DNS,DOD,Domain Name System,due diligence,Economy,electronic database,Emerson Development LLC,espionage,Finance,Financial,Financial Identity,Financial InfoSec,governance,hackers,hacking,Harry Emerson III,homeland Security,ID,identity thief,infiltrate,Infoduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,interview,intrusion,iphone,IronPipe,ISR,Jacqueline Herships,Kevin M. Nixon,law,legal,liability,Managed Security,markets,meltdown,misuse,national security,News,outsourcing,paperless,POTS,privacy rights,Public Switched Telephone Network (PSTN),Raytheon,regulations,regulatory,removeable devices,Report,risk,ROI,sabotage,Security,shareholder derivative,Signaling System #7,Skype,SS7,steal,System,systems,telecommunications,theft,third party,Time Warner,valuation,vendors,VOIP,Vonage,zero day attack

del.icio.us Tags: 2009,access,Anthony M. Freed,Apple,Breach,breaches,bypass,CableVision,class action,Comcast,computer,confidential,consumer product liability,control,Costs,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DDoS,DNS,DOD,Domain Name System,due diligence,Economy,electronic database,Emerson Development LLC,espionage,Finance,Financial,Financial Identity,Financial InfoSec,governance,hackers,hacking,Harry Emerson III,homeland Security,ID,identity thief,infiltrate,Infoduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,interview,intrusion,iphone,IronPipe,ISR,Jacqueline Herships,Kevin M. Nixon,law,legal,liability,Managed Security,markets,meltdown,misuse,national security,News,outsourcing,paperless,POTS,privacy rights,Public Switched Telephone Network (PSTN),Raytheon,regulations,regulatory,removeable devices,Report,risk,ROI,sabotage,Security,shareholder derivative,Signaling System #7,Skype,SS7,steal,System,systems,telecommunications,theft,third party,Time Warner,valuation,vendors,VOIP,Vonage,zero day attack

IceRocket Tags: 2009,access,Anthony M. Freed,Apple,Breach,breaches,bypass,CableVision,class action,Comcast,computer,confidential,consumer product liability,control,Costs,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DDoS,DNS,DOD,Domain Name System,due diligence,Economy,electronic database,Emerson Development LLC,espionage,Finance,Financial,Financial Identity,Financial InfoSec,governance,hackers,hacking,Harry Emerson III,homeland Security,ID,identity thief,infiltrate,Infoduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,interview,intrusion,iphone,IronPipe,ISR,Jacqueline Herships,Kevin M. Nixon,law,legal,liability,Managed Security,markets,meltdown,misuse,national security,News,outsourcing,paperless,POTS,privacy rights,Public Switched Telephone Network (PSTN),Raytheon,regulations,regulatory,removeable devices,Report,risk,ROI,sabotage,Security,shareholder derivative,Signaling System #7,Skype,SS7,steal,System,systems,telecommunications,theft,third party,Time Warner,valuation,vendors,VOIP,Vonage,zero day attack

43 Things Tags: 2009,access,Anthony M. Freed,Apple,Breach,breaches,bypass,CableVision,class action,Comcast,computer,confidential,consumer product liability,control,Costs,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DDoS,DNS,DOD,Domain Name System,due diligence,Economy,electronic database,Emerson Development LLC,espionage,Finance,Financial,Financial Identity,Financial InfoSec,governance,hackers,hacking,Harry Emerson III,homeland Security,ID,identity thief,infiltrate,Infoduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,interview,intrusion,iphone,IronPipe,ISR,Jacqueline Herships,Kevin M. Nixon,law,legal,liability,Managed Security,markets,meltdown,misuse,national security,News,outsourcing,paperless,POTS,privacy rights,Public Switched Telephone Network (PSTN),Raytheon,regulations,regulatory,removeable devices,Report,risk,ROI,sabotage,Security,shareholder derivative,Signaling System #7,Skype,SS7,steal,System,systems,telecommunications,theft,third party,Time Warner,valuation,vendors,VOIP,Vonage,zero day attack

BuzzNet Tags: 2009,access,Anthony M. Freed,Apple,Breach,breaches,bypass,CableVision,class action,Comcast,computer,confidential,consumer product liability,control,Costs,cyber security,cyber-crime,cybersecurity,D and O liability,Data,DDoS,DNS,DOD,Domain Name System,due diligence,Economy,electronic database,Emerson Development LLC,espionage,Finance,Financial,Financial Identity,Financial InfoSec,governance,hackers,hacking,Harry Emerson III,homeland Security,ID,identity thief,infiltrate,Infoduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,interview,intrusion,iphone,IronPipe,ISR,Jacqueline Herships,Kevin M. Nixon,law,legal,liability,Managed Security,markets,meltdown,misuse,national security,News,outsourcing,paperless,POTS,privacy rights,Public Switched Telephone Network (PSTN),Raytheon,regulations,regulatory,removeable devices,Report,risk,ROI,sabotage,Security,shareholder derivative,Signaling System #7,Skype,SS7,steal,System,systems,telecommunications,theft,third party,Time Warner,valuation,vendors,VOIP,Vonage,zero day attack

Guide to Global Leadership: Two Recommended “Must Reads” for Corporate Executives

By Kevin M. Nixon, MSA, CISSP^©, CISM^©, CGEIT^©

“The Age of the Unthinkable” by Joshua Cooper Ramo

Do not pass Go! Do not collect $200!  Go directly online and buy “The Age of the Unthinkable” by Joshua Cooper Ramo.  I have been telling everyone I know about this book and now I am writing about it too.

We can all agree, that each day we hear yet another discouraging news report on how something else unexpected has gone to hell in a hand-basket.  Just this past November 2008, Alan Greenspan in testimony before Congress said “I’ve discovered a flaw.”  The Congressman questioning Mr. Greenspan asked him to explain, and with much bewilderment Mr. Greenspan said that “using the vast knowledge he had accumulated of the last 40 years and on which he had based his most trusted decisions, was no longer valid.” 

Hearing that from Alan Greenspan must have had the same impact as someone overhearing Warren Buffet say “oops, I only wanted to buy 10% of that company and I accidentally added an extra zero.  Now I own 100%.  Can I change that order?”

Here is some background on the author: 

Joshua Cooper Ramo is the managing director at Kissinger Associates, one of the world’s leading geostrategic advisory firms and the former foreign editor and assistant managing editor of Time magazine.

Mr. Ramo has recently released an audio book entitled “The Age of the Unthinkable – Why the new world disorder constantly surprises us and what we can do about it”

Here is a brief section of the book’s introduction:

“Just a few years into a new century, we’ve arrived at a moment of peril that not long ago would have seemed unimaginable.  All around us, the ideas and institutions that we once relied on for our safety and security are failing, and the best ideas of our leaders seem to make our problems worse, not better.  A global war on terror produces,  in the end, more dangerous terrorists.  The fight to stop financial crisis seems to accelerate its arrival.  Carefully negotiated  peace plans produce less peace.

This wasn’t always the case.  For decades, our engagement with the world was based on the seductive belief that there was a logical relationship between the power of states and the physics of change.  But that traditional physics of power has been replaced by something radically different.  Drawing upon history, economics, complexity theory, psychology, human immunology, and the science of networks we learn about a landscape of inherent unpredictability and remarkable possibility.”

"ALL I REALLY NEED TO KNOW I LEARNED IN KINDERGARTEN" by Robert Fulghum

Most of what we really need to know about how to live, and what to do, and how to be, we learned in kindergarten. Wisdom was not at the top of the graduate school mountain, but there in the sand box at nursery school.

These are the things we learned.

• Share everything.
• Play fair.
• Don't hit people.
• Put things back where you found them.
• Clean up your own mess.
• Don't take things that aren't yours.
• Say you are sorry when you hurt somebody.
• Wash your hands before you eat.
• Flush.
• Warm cookies and cold milk are good for you.
• Live a balanced life.
• Learn some and think some and draw some and paint and sing and dance and play and work everyday.
• Take a nap every afternoon.
• When you go out in the world, watch for traffic, hold hands, and stick together.
• Be aware of wonder.
• Remember the little seed in the plastic cup? The roots go down and the plant goes up and nobody really knows how or why. We are like that.

And then remember that book about Dick and Jane and the first word you learned, the biggest word of all: LOOK! Everything you need to know is there somewhere. The Golden Rule and love and basic sanitation, ecology, and politics and the sane living.

Think of what a better world it would be if we all, the whole world, had cookies and milk about 3 o'clock every afternoon and then lay down with our blankets for a nap. Or we had a basic policy in our nation and other nations to always put things back where we found them and clean up our own messes. And it is still true, no matter how old you are, when you go out in the world, it is best to hold hands and stick together.

Kevin M. Nixon, MSA, CISSP®, CISM®, CGEIT®, has testified as an expert witness before the Congressional High Tech Task Force, the Chairman of the Senate Armed Services Committee, and the Chairman of the House Ways and Means Committee. He has also served on infrastructure security boards and committees including the Disaster Recovery Workgroup for the Office of Homeland Security, and as a consultant to the Federal Trade Commission.

The Author gives permission to link, post, distribute, or reference the above article for any lawful purpose, provided attribution is made to the author and to Information-Security-Resources.com

IceRocket Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack

Technorati Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack

del.icio.us Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack

BuzzNet Tags: 2009,access,Kevin M Nixon,Anthony M Freed,best practices,bypass,compliance,computer,confidential,consumer product liability,control,Costs,criminal,cyber security,cyber-crime,cybersecurity,D and O liability,Data,due diligence,Economy,electronic database,Finance,Financial,Financial Identity,Financial InfoSec,Gene Kim,governance,Infoduciary,Infofiduciary,Information,Information Fiduciary,Information-Security-Resources.com,InfoSec,infrastructure,Internet Security Alliance,Intrusion Detection Engines,ISR,Kevin M. Nixon,Laura Wilson,law,legal,liability,mandates,national security,News,outsourcing,privacy rights,protocol,regulations,regulatory,risk,Sarbanes-Oxley,Security,SOX,statutes,System,systems,third party,Tripwire,valuation,vendors,zero day attack