SCOTT BERINATO
CSO Disclosure Series | Reporter's Notebook: The United States of TMI
Lead paint in toys. Brain-eating amoeba. Identity theft. Drowning in sand. We know more than ever about the risks all around us. Do we know what disclosing them all is doing to us?
CSO Disclosure Series | Data Breach Notification Laws, State By State
Five years after California's landmark SB 1386, our interactive map shows you which 38 states have passed laws requiring companies to notify consumers whose personal information has been compromised. Part of an in-depth series about disclosing security breaches.
CSO Disclosure Series | What's Next with Disclosure Legislation?
An interview with lawyer and breach notification expert Tanya Forsheit on why the United States still doesn’t have a federal breach notification law. Part of an in-depth series about disclosing breaches
CSO Disclosure Series | The Dos and Don'ts of Disclosure Letters
One security breach, two letters, 11 lessons in the art of telling customers you screwed up. Two PR pros deconstruct the messages that Monster.com and USAJOBS were really giving to customers whose personal information had been disclosed. Part of an in-depth series about disclosing breaches.
What you don’t know about the hidden passageways into your applications can hurt you. Security researcher Chris Wysopal explains three different types of backdoors and how you can defend against them
Punishments That Fit the Crimes
What if every wrong-doer earned a sentence that suited the wrong-doing?
Should Surveillance Cameras Detect Criminals, or Deter Crime
In the real world (with graffiti) and online (with spam), arrest and conviction don't always equal effective security
Privacy: The Worst Quotes of the Year
From massive data breaches to insidious new ways to deliver ads online, we found plenty of privacy lowlights in 2007. So many, in fact, that we’re introducing a new award. Ladies and gentlemen, the 2007 Privvy Awards for outstanding quotability regarding privacy.
Application Security: Is the Backdoor Threat the Next Big Threat to Applications?
Security researcher Chris Wysopal talks about the misunderstood vulnerability of backdoors, what he’s doing to formalize understanding of them, and what his research tells him about the security of open source versus proprietary applications.
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.


