<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The State of Security &#187; Infosec</title>
	<atom:link href="http://www.tripwire.com/state-of-security/tag/infosec/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.tripwire.com/state-of-security</link>
	<description>Debunking myths, analyzing trends and sharing best practices in IT security and compliance.</description>
	<lastBuildDate>Mon, 21 May 2012 14:41:50 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>How To Deal with a Security Incident</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/how-to-deal-with-a-security-incident/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/how-to-deal-with-a-security-incident/#comments</comments>
		<pubDate>Thu, 17 May 2012 21:00:06 +0000</pubDate>
		<dc:creator>Cindy Valladares</dc:creator>
				<category><![CDATA[Incident Detection]]></category>
		<category><![CDATA[Log Management and SIEM]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[incident detection]]></category>
		<category><![CDATA[incident response]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[Infosecurity Europe]]></category>
		<category><![CDATA[IT Security]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=6205</guid>
		<description><![CDATA[“Incidents are bound to happen, there’s no avoiding it!” Are you prepared to deal with a security breach? Infosec expert and &#8216;cynic&#8217; Javvad Malik interviews Brian Honan (@BrianHonan on Twitter) internationally recognized information security expert, during Infosecurity Europe conference to offer tips on how to respond to security incidents. First tip? Identify if the problem [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/how-to-deal-with-a-security-incident/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>The Best Information Security Advice (European Flavor)</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/the-best-information-security-advice-european-flavor/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/the-best-information-security-advice-european-flavor/#comments</comments>
		<pubDate>Thu, 17 May 2012 18:28:55 +0000</pubDate>
		<dc:creator>Cindy Valladares</dc:creator>
				<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[Infosecurity Europe]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=6195</guid>
		<description><![CDATA[As hundreds of security professionals gathered for the 2012 Infosecurity Europe conference in London, infosec expert and &#8216;cynic&#8217; Javvad Malik surveyed the pros with a simple question: “What is the best security advice you have ever been given?” A surprising handful of answers revolve around items as simple as passwords. Check out this video to see [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/the-best-information-security-advice-european-flavor/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Are your security people lying about the impacts? Probably, but not on purpose.</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/are-your-security-people-lying-about-the-impacts-probably-but-not-on-purpose/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/are-your-security-people-lying-about-the-impacts-probably-but-not-on-purpose/#comments</comments>
		<pubDate>Mon, 14 May 2012 16:30:49 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[CVSS]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Data Breaches]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[ITSM]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5976</guid>
		<description><![CDATA[Security is a complex, often nuanced, topic. Today there’s a lot of subjectivity in 100% security oriented discussions. Business people like non-squidgy objective numbers. To make security investment decisions, security people have to sell their area to the business; which means speaking their language. As a consequence, security people are often trying to make objective [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/are-your-security-people-lying-about-the-impacts-probably-but-not-on-purpose/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Challenges in placing information security teams in the right organizational structure</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/challenges-in-placing-information-security-teams-in-the-right-organizational-structure/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/challenges-in-placing-information-security-teams-in-the-right-organizational-structure/#comments</comments>
		<pubDate>Fri, 20 Apr 2012 23:47:10 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[Incident Detection]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Data Breaches]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[risk]]></category>
		<category><![CDATA[Risk management]]></category>
		<category><![CDATA[_IT Compliance]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5880</guid>
		<description><![CDATA[I often write blogs based on what crosses my inbox during a week; and recently I saw just enough articles on who security should report to that I thought I’d select it as the topic du jour.  (Much like Adam, I rarely seem to get to writing these early. This isn’t a new topic, I [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/challenges-in-placing-information-security-teams-in-the-right-organizational-structure/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Say it ain&#8217;t so! Risk Management isn&#8217;t a silver bullet with no problems?!</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/risk-mgmt/say-it-aint-so-risk-management-isnt-a-silver-bullet-with-no-problems/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/risk-mgmt/say-it-aint-so-risk-management-isnt-a-silver-bullet-with-no-problems/#comments</comments>
		<pubDate>Mon, 09 Apr 2012 16:30:31 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[risk]]></category>
		<category><![CDATA[Risk management]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5611</guid>
		<description><![CDATA[In a number of recent posts, Risk Management has been a hot topic. I’d hate to leave you with the impression that Risk Management is somehow a panacea for all security programs and problems. To address that, here’s a post dedicated to a specific wart on the complexion of risk management. Many people are data [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/risk-mgmt/say-it-aint-so-risk-management-isnt-a-silver-bullet-with-no-problems/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Friendly pwnage? Or just a public beat down?</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/friendly-pwnage-or-just-public-beat-down/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/friendly-pwnage-or-just-public-beat-down/#comments</comments>
		<pubDate>Thu, 05 Apr 2012 15:30:14 +0000</pubDate>
		<dc:creator>Dwayne Melancon</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[Incident Detection]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[Security Hardening]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5654</guid>
		<description><![CDATA[It seems some hackers (known as "MalSec") are going around to security companies, defacing their web sites, and leaving "polite warnings" that they'd better get their act together or they face the risk of being hacked in a more malicious fashion.  Are these "helpful" hacks really helpful or not?]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/friendly-pwnage-or-just-public-beat-down/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Why physical and information security working together might give a Hollywood spy a headache</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/why-physical-and-information-security-working-together-might-give-a-hollywood-spy-a-headache/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/why-physical-and-information-security-working-together-might-give-a-hollywood-spy-a-headache/#comments</comments>
		<pubDate>Mon, 26 Mar 2012 16:30:13 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[Incident Detection]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[Security Hardening]]></category>
		<category><![CDATA[event management]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[Risk management]]></category>
		<category><![CDATA[trends]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5588</guid>
		<description><![CDATA[Everyone has a favorite spy movie. I admit to a particular fondness for the Bond franchise, even though most people can probably forecast the storyline without ever actually seeing any specific movie.  There is a specific piece of that trope that completely speaks to the relationship between cybersecurity and physical security. In all spy movies, [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/why-physical-and-information-security-working-together-might-give-a-hollywood-spy-a-headache/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Who&#8217;s measuring Information Security Risk anyway?</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/whos-measuring-information-security-risk-anyway/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/whos-measuring-information-security-risk-anyway/#comments</comments>
		<pubDate>Thu, 15 Mar 2012 15:30:50 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[Security Hardening]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[Risk management]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5491</guid>
		<description><![CDATA[In this business of security, one of the most common challenges is that it’s hard to know where you stand, let alone compare today&#8217;s stand to yesterday&#8217;s. We just about learn how to measure, manage and address one type of problem (say malware) and another appears (say botnets). In addition, we want to know that [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/whos-measuring-information-security-risk-anyway/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Public Service Announcement &#8211; Stress and Burnout in the InfoSec Community</title>
		<link>http://www.tripwire.com/state-of-security/off-topic/public-service-announcement-stress-and-burnout-in-the-infosec-community/</link>
		<comments>http://www.tripwire.com/state-of-security/off-topic/public-service-announcement-stress-and-burnout-in-the-infosec-community/#comments</comments>
		<pubDate>Mon, 05 Mar 2012 17:30:58 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Off Topic]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[Josh Corman]]></category>
		<category><![CDATA[RSA]]></category>
		<category><![CDATA[RSA 2012]]></category>
		<category><![CDATA[trends]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5312</guid>
		<description><![CDATA[A week ago, to kick off RSA, there was a Professional Development Track Session (PROF-001) on the topic of stress and burnout in the Information Security industry. One of the comments made at the track was that if you do a Google search on this topic, nothing comes back. That’s something that’s easy to fix, [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/off-topic/public-service-announcement-stress-and-burnout-in-the-infosec-community/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Explaining Information Security, Risk and Compliance to Your Mom</title>
		<link>http://www.tripwire.com/state-of-security/compliance/explaining-information-security-risk-and-compliance-to-your-mom/</link>
		<comments>http://www.tripwire.com/state-of-security/compliance/explaining-information-security-risk-and-compliance-to-your-mom/#comments</comments>
		<pubDate>Fri, 17 Feb 2012 16:39:57 +0000</pubDate>
		<dc:creator>Cindy Valladares</dc:creator>
				<category><![CDATA[Regulatory Compliance]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[Risk management]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=5002</guid>
		<description><![CDATA[I&#8217;m sure you&#8217;ve been at a social party enjoying a good conversation when someone asks you: &#8220;So what do you do?&#8221;. It&#8217;s frustrating sometimes to explain in layman terms what we do as information security professionals. On top of that, it seems like everyone in the industry has his or her own way of defining [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/compliance/explaining-information-security-risk-and-compliance-to-your-mom/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Considering PII as &#8220;Potential&#8221; Information on unique Identity</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/considering-pii-as-potential-information-on-unique-identity/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/considering-pii-as-potential-information-on-unique-identity/#comments</comments>
		<pubDate>Mon, 13 Feb 2012 16:51:24 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Data Breaches]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=4819</guid>
		<description><![CDATA[With all the conversations about Google and their privacy policy changes, as well as the ongoing conversation about how much risk the Zappos breach really offers; the concept of PII seems like a topical item for this blog post. I like to proceed like the King tells the White Rabbit: “&#8221;Begin at the beginning,&#8221; the [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/security-controls/considering-pii-as-potential-information-on-unique-identity/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Why Roman Emperors are security relevant (CAESERS FE and InfoSec)</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/why-roman-emperors-are-security-relevant-ceasers-fe-and-infosec/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/why-roman-emperors-are-security-relevant-ceasers-fe-and-infosec/#comments</comments>
		<pubDate>Mon, 06 Feb 2012 17:00:42 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Continuous Monitoring]]></category>
		<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[Incident Detection]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[Security Hardening]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=4627</guid>
		<description><![CDATA[Caesar Augustus was the Roman Emperor whose legacy is what most people remember when they think of a Caesar. In particular, because as children, most of us learned that he ushered in the Pax Romana and expanded the Roman Empire a lot while creating a bunch of standards that improved the quality of life for [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/why-roman-emperors-are-security-relevant-ceasers-fe-and-infosec/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>How do you eat an elephant?</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/how-do-you-eat-an-elephant/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/how-do-you-eat-an-elephant/#comments</comments>
		<pubDate>Wed, 25 Jan 2012 16:15:26 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[Security Hardening]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Data Breaches]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[IT Security]]></category>
		<category><![CDATA[Risk management]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=4449</guid>
		<description><![CDATA[If we were hoping for news related to breaches to slow down now that we were out of 2012, it looks like we’re already out of luck, even though we aren’t out of January. Seeing Symantec and Zappos in the news already this year can make those responsible for protecting their organizations feel like there’s [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/how-do-you-eat-an-elephant/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Predictability and Visibility: The Cure for Sleepless Nights</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/predictability-and-visibility-the-cure-for-sleepless-nights/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/predictability-and-visibility-the-cure-for-sleepless-nights/#comments</comments>
		<pubDate>Mon, 23 Jan 2012 16:26:37 +0000</pubDate>
		<dc:creator>Cindy Valladares</dc:creator>
				<category><![CDATA[Continuous Monitoring]]></category>
		<category><![CDATA[Incident Detection]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Security Hardening]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[Risk management]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=4437</guid>
		<description><![CDATA[What makes security, risk and compliance officers sleep at night? Key factors include: visibility, predictability, optimization &#038; business alignment.]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/predictability-and-visibility-the-cure-for-sleepless-nights/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Why Security carries a Risk Management umbrella wherever it goes</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/why-security-carries-a-risk-management-umbrella-wherever-it-goes/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/why-security-carries-a-risk-management-umbrella-wherever-it-goes/#comments</comments>
		<pubDate>Mon, 09 Jan 2012 17:00:05 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Security Controls]]></category>
		<category><![CDATA[Information Security]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[risk]]></category>
		<category><![CDATA[Risk management]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=4252</guid>
		<description><![CDATA[Security people used to be stereotyped as geeky people who did obscure things with systems against equally obscure threats. However, you can’t read security news lately and not see references to risk, and then to risk management, regardless of what segment (banking, retail, construction, etc.) you are in. For people just getting familiar with the [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/why-security-carries-a-risk-management-umbrella-wherever-it-goes/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Do we owe high profile breaches a thank you?</title>
		<link>http://www.tripwire.com/state-of-security/it-security-data-protection/do-we-owe-high-profile-breaches-a-thank-you/</link>
		<comments>http://www.tripwire.com/state-of-security/it-security-data-protection/do-we-owe-high-profile-breaches-a-thank-you/#comments</comments>
		<pubDate>Mon, 02 Jan 2012 17:05:51 +0000</pubDate>
		<dc:creator>Shawna Turner-Rice</dc:creator>
				<category><![CDATA[Cyber Security]]></category>
		<category><![CDATA[Incident Detection]]></category>
		<category><![CDATA[IT Security and Data Protection]]></category>
		<category><![CDATA[Risk Management]]></category>
		<category><![CDATA[Security Hardening]]></category>
		<category><![CDATA[Infosec]]></category>
		<category><![CDATA[Risk Assessment]]></category>
		<category><![CDATA[Risk management]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.tripwire.com/state-of-security/?p=4202</guid>
		<description><![CDATA[Here we are at the cusp of a New Year; and I&#8217;m looking back and waxing philosophical. I’m thinking that paradoxically, having a lot of painful, expensive, high profile breaches actually advanced the state of security, and risk management. A cursory glance across infosec headlines in 2010 and 2011 is covered in highly publicized breaches [...]]]></description>
		<wfw:commentRss>http://www.tripwire.com/state-of-security/it-security-data-protection/do-we-owe-high-profile-breaches-a-thank-you/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

