<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>InfoSecMinds &#187; Security</title>
	<atom:link href="http://infosecminds.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://infosecminds.com</link>
	<description>For like-minded people</description>
	<lastBuildDate>Wed, 05 May 2010 07:29:16 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>CISF Security at Infosys</title>
		<link>http://infosecminds.com/2009/07/31/cisf-security-at-infosys/</link>
		<comments>http://infosecminds.com/2009/07/31/cisf-security-at-infosys/#comments</comments>
		<pubDate>Fri, 31 Jul 2009 09:07:51 +0000</pubDate>
		<dc:creator>Vinod Puthuseeri</dc:creator>
				<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Information Security Management System]]></category>
		<category><![CDATA[Information Security Risk Assessment]]></category>
		<category><![CDATA[Information Security Risk Management]]></category>
		<category><![CDATA[Physical Security]]></category>
		<category><![CDATA[Risk Assessment]]></category>
		<category><![CDATA[ISMS]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://infosecminds.com/?p=146</guid>
		<description><![CDATA[In the recent news Infosys becomes the first private company to get CISF security. I have also been reading in yet another blog about a organization conducting mocks drills for terrorist’s attacks. It is quite interesting to see that organizations are now taking security as a prime concern. As mentioned in my previous blog about [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: justify;">In the recent news Infosys becomes the first private company to get CISF security. I have also been reading in yet another <a href="http://vagrasala.wordpress.com/2009/07/01/beyond-fire-mock-drills-to-terrorist-attack-mock-drills/">blog</a> about a organization conducting mocks drills for terrorist’s attacks. It is quite interesting to see that organizations are now taking security as a prime concern. As mentioned in my previous blog about frisking of VIP’s at airports, the exception mentioned there is an age old rule that was implemented when terrorism was a not major concern.</p>
<p style="text-align: justify;"><span id="more-146"></span></p>
<p style="text-align: justify;">It is important for every organization to constantly carry out risk assessment in their organizations to ensure that they are protected from new threats. Today terrorism has become a major threat for organizations as well and hence it is definitely required for organizations to include terrorism as a threat in their risk assessment exercise.</p>
<p style="text-align: justify;">A constant risk assessment exercise does not only help in identifying and protecting against the latest threats, but also looks into the processes and controls that was defined and implemented years ago. Though the processes and controls might be working well, it might not include the risks due to the latest threats and if risk assessments are not conducted on a regular basis, these new threats might go unnoticed.</p>
<p style="text-align: justify;">Hence organization are encouraged to have the risk assessment exercise as an annual activity and also when there is a major change within the organization. It is also important to keep a tab on the new threats that need to be included in their risk assessment exercise.</p>
<p style="text-align: justify;">Now the next arising question is, what are the risks of having these armed CISF securities in the campus?</p>
]]></content:encoded>
			<wfw:commentRss>http://infosecminds.com/2009/07/31/cisf-security-at-infosys/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Frisking of VIP’s at airport&#8217;s</title>
		<link>http://infosecminds.com/2009/07/22/frisking-of-vip%e2%80%99s-at-airports/</link>
		<comments>http://infosecminds.com/2009/07/22/frisking-of-vip%e2%80%99s-at-airports/#comments</comments>
		<pubDate>Wed, 22 Jul 2009 09:01:52 +0000</pubDate>
		<dc:creator>Vinod Puthuseeri</dc:creator>
				<category><![CDATA[Physical Security]]></category>
		<category><![CDATA[Airport Security]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://infosecminds.com/?p=138</guid>
		<description><![CDATA[In the recent incident of Dr. APJ Kalam been frisked at the IGI airport by the staff of Continental Airlines has created some news. The Airline has also tendered an apology to Dr. Kalam for the inconvienence caused – this is as reported in the TimesofIndia daily newspaper on 22nd July 2009. Now does that [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: justify;">In the recent incident of Dr. APJ Kalam been frisked at the IGI airport by the staff of Continental Airlines has created some news. The Airline has also tendered an apology to Dr. Kalam for the inconvienence caused – this is as reported in the TimesofIndia daily newspaper on 22<sup>nd</sup> July 2009.</p>
<p style="text-align: justify;">Now does that apology mean that Continental Airlines will not frisk any VIP’s in future while they board the flight..? I see a security concern here.</p>
<p style="text-align: justify;"><span id="more-138"></span></p>
<p style="text-align: justify;">Not having the VIP’s frisked before boarding the flight is a security hole, nevertheless these people are always surrounded with guards and they move with apt protection. But these people (if found an opportunity) could be utilized in carrying materials (those prohibited in flight) to be taken very easily, which will pass them through all sorts of check without any objection.</p>
<p style="text-align: justify;">The materials can be put into the VIP’s pockets or hand baggage without his/her notice or he/she could be threatened to carry some stuff, which he/she might not be able to disclose. This can be done since this is a known security hole.</p>
<p style="text-align: justify;">Now the next concern is the rule that says</p>
<p style="text-align: justify;">“Indian laws exempt dignitaries like former presidents, ex-PMs, Chief Justice of India and even Robert Vadra from being frisked at airports.” – quote TimeofIndia.</p>
<p style="text-align: justify;">Suppose, lets say the law of the country where the airline is flying too (destination) is stringent and has ordered the airline to frisk all passengers boarding that flight. Now if there would have been an incident mid-air, who would take up the responsibility..?</p>
<p style="text-align: justify;">In this scenario, does the airline follow the rule of the country currently landed at OR the rule to which the airline will be flying?</p>
<p style="text-align: justify;">Your thoughts.</p>
]]></content:encoded>
			<wfw:commentRss>http://infosecminds.com/2009/07/22/frisking-of-vip%e2%80%99s-at-airports/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
