http://rossgraber.com Audit, Compliance, Internal Control, Information Security, Investigation, Project Management Fri, 14 Mar 2008 02:11:14 +0000 http://backend.userland.com/rss092 en There's an emerging debate between computer forensic technicians and private investigators. The question is what constitutes an expert witness, and what evidence is admissible in court. State PI associations are lobbying to require a PI license to perform computer forensics for hire, and thus to present in court. Others argue that ... http://rossgraber.com/?p=18 Who owns the data associated with a user's account within an online service? The answer isn't simple. For example, email has a different status than an address book. In the case of a social network derived from an address book, the social graph is viewed by the business as a compilation ... http://rossgraber.com/?p=17 The spammers come to Facebook; there's a highly viral applet that utilizes social engineering to spread spyware. My 2008 prediction: 20+ hot girls a day asking to be our "friend" on FB as with MySpace (to spread spam). A new social network emerges with a limited audience and the trendsetters ... http://rossgraber.com/?p=16 This post is an ongoing collection of articles, surveys, and research about computer forensics. Surveys & Research: The US Secret Service published a best practice guide on seizing electronic evidence. http://rossgraber.com/?p=15 This post is an ongoing collection of articles, surveys, and research about data governance and privacy. General references: The EFF has a page that gives a status update on pending legislation and court cases related to privacy rights. Specific references: Privacy Rights Clearinghouse has a chronology that documents data breaches since 2005. The grand ... http://rossgraber.com/?p=14 This post is an ongoing collection of articles, surveys, and research about electronic voting. General, non-partisan references: The National Campaign for Fair Elections also covers the electronic voting issue. The EFF has a great page dedicated to the subject. The New York Times Magazine has a great summary article. General, partisan references: Bev Harris of Blackboxvoting.org ... http://rossgraber.com/?p=13 This post is an ongoing collection of articles, surveys, and research about IT General Controls. The Royal Bank of Canada suffered major downtime due to a failed upgrade of their computer systems in 2004. http://rossgraber.com/?p=12 This post is an ongoing collection of articles, surveys, and research about mortgage fraud and the credit bubble. General References: Rachel Dollar's and the Prieston Group's blogs focus on mortgage fraud. John Maudlin publishes my favorite investing and economic analysis newsletter. He's had some great discussion of the credit bubble, sub-prime crisis, and ... http://rossgraber.com/?p=11 This post is an ongoing collection of articles, surveys, and research about the cybercrime economy. Surveys & Research: The FBI's most recent cybercrime report was issued in 2006. The US Secret Service published two reports on cybercrime. Articles: ZDnet UK has a survey article on the state of the "cybercrime economy". Niall Kennedy's blog has a ... http://rossgraber.com/?p=4 This post is an ongoing collection of articles about identity theft. General References: Privacy Rights Clearinghouse has an identity theft page with lots of content. Specific References: FaceBook source code was leaked during summer 07. A judge was defamed by a fake MySpace profile. According to this MSNBC article, 3% of US households suffer identity theft. Identity ... http://rossgraber.com/?p=10