Over at Microsoft’s Technet site, the folks at their Security Response Center have posted the “10 Immutable Laws of Security.”
Admittedly, it only covers security for computers (and remember, that means your cell phone and tablet) and websites, but it’s still very worth reviewing. There’s nothing new, nothing arcane there, but they are the cold, hard facts that we all have to remember if we make any pretense of caring about our clients’ privacy. Simple things, like “If a bad guy can persuade you to run his program on your computer, it’s not your computer anymore.”
Do you have client phone numbers on your iPhone? Have you installed any apps?
Think about it. Seriously.