As a security engineer it's usually difficult for me to endure many of
dumb things companies do. It's quite sad when a company that prides
itself on creating solutions for building internal solutions to protect
customer data actually starts pushing its own data out to Google and
other "solution" providers. It's as if they don't actually believe in
their own products and actually think that a contract will actually
protect their data.
So it's quite refreshing when you run across a group that actually gets
information security. Recently, I ran across the information security
bulletins
at CERN (particle physics is another
interest of mine) and was excited to find a group that actually gets
it. They provide internal, secure solutions for getting their work
done without using outside
solutions
such as Google, Apple, Microsoft, Amazon, and Dropbox cloud solutions (I
wish more of the internal solutions were FOSS but...). In fact, CERN
feels externally-hosted solutions are a bad idea for both business and
personal
uses.
I concur.
Here is a sample of their infosec bulletins:
What about you? Do you care about the security of your information?