A client recently asked me about the VOW password change requirement that reads as follows “A Participant shall require that Registrants’ passwords be reconfirmed or changed every 180 days.” What is the security driver for the rule as written? Chances that a password will be compromised and will be changed before it is used by … Read more
The other day I was talking with a client, a successful consolidation project came up in the conversation, and they said something along the lines of, “You still do that? I hired someone else and they bleeped it up entirely.” That was my inspiration for this blog post. Who Do I Help? I still serve … Read more
At the most basic level, single sign-on (SSO) lets people log in once and then easily access an organization’s numerous applications, eliminating the need to remember multiple logins and passwords. For end users, SSO improves convenience and workflow. Some multiple listing organizations have adopted SSO without security designed for real estate industry challenges. This is … Read more
The pandemic has many companies’ employees working remotely, and – in the rush to transition to work-from-home – not every company fully explored the resultant information security ramifications. Following are some steps companies can take to reduce the cybersecurity risk for those workers, helping protect against disruption or loss of control over sensitive information assets. … Read more
An information security incident can damage your reputation and cost a lot to recover from. Such breaches often are caused by the action or inaction of people associated with the company not handling the physical security of sensitive information properly. Every person working in an organization has a role to play in keeping information secure … Read more
