Maria Hill: What does S.H.I.E.L.D. stand for?
Agent Ward: Strategic Homeland Intervention Enforcement and Logistics Division
Maria Hill: What does that mean to you?
Agent Ward: It means someone really wanted our initials to spell S.H.I.E.L.D.
We had a hiring event on Thursday in the DC area, we ended up having about 175 PM types(non technical) and 25 technical types(10 or so with PMP), guess which ones go the phone calls..... I would only view a non technical to help supplement your technical ability and to help bridge the gap between the tech and non tech people.
Frankly it was scary how many non technical types were after jobs at a tech based company.
Most on prem IT will be a glorified helpdesk unless you have some other overriding cost or the size to keep it in-house, its been happening for awhile in bits and drabs. Most of the proposals I've been working on deal with some aspect of the Cloud, or pushing data to it. Just like how the Security Assessment Process is moving to to Continuous Monitoring. Where is the infrastructure/hosting? In the cloud of course. Costs dictate this.
There are plenty of publications, NIST, SANS, US Cert, etc. Pick your flavor and get started. First and foremost is an inventory and then work through junk to see what is at risk. Most small/medium commercial places are downright scary.
Cause when I'm at Disney waiting in line for a ride or bus, its easier to carry, lighter and I can put it in a ziplock bag that holds the reader, cellphone and wallet if it rains. All while fitting in a cargo pocket of my pants/shorts. Oh, and it works for days and only needs a usb cable to charge, like the one on my cell phone. Netbook/laptop means an extra PSU. Works better on the airplane as well.
B.O. winning the nobel prize is like me winning the lottery, I'll keep playing and eventually I'll pick a winner, go ahead and pay my 130 million now.... It should be based on accomplishments. How many first round draft picks, children of successful people, and joe blow end up with nothing from something.
They should collect their staffs user data, given the example of the NSF yesterday, and how big Symantec is, they should be able to cover almost everything I would say. Let their employees be the guinea pigs for this....
Our workers there are jammed 2-3 to a cube, the only way you have the ability to do that there and not get caught is have your own office, which is management. Who knows, maybe this will get us more business:-)
I hate to say it, but if you got hit by large amount of Conficker and are in IT, you weren't doing your job. It might be excusable if you have remote users who never come into the office, but for in-house systems it should have been a non-issue. NMAP scans and checking your system management console for applied patches would have taken care of you, and not waiting till the last minute.
Now we will be stuck having no Driving and Video Chatting laws while in the car. Hands free too since it will be mounted on the dash inplace of the GPS. You know it will happen sometime that a person will be video chatting and get in an accident. Then the other end of the chat will see the person die and have PTSD and sue Apple.
Another problem will be for the IT guys. I have users drives working, but their machines dying till I get a tech here to repair it. This will firmly stop swapping of drives to other machines, cloning their data using a USB/Firewire.
I imagine were going to be needing a TCG external hard drive enclosure.