In reply to a post by jchamier:

In reply to a post by CarlTSpeak:

Wishful thinking on my part, isn't it?

Shouldn't be, Windows builds in execution control tools, and prior to that we've been using tools from providers such as Lumension (now Ivanti) to whitelist applications.

Its not rocket science!

No, it's not impossible, but the problem is that it's not being done where it needs to be. I bet there are still Government owned laptops without hard drive encryption even though it's mandatory [PDF].

In reply to a post by caffn8me:

No, it's not impossible, but the problem is that it's not being done where it needs to be. I bet there are still Government owned laptops without hard drive encryption even though it's mandatory [PDF].

Sure, and I bet many are still Windows 7.

In reply to a post by caffn8me:

I think BYOD is the trendy thing these days and it's a nightmare. Having said that, I was recently chatting to someone who works for one of the large consulting firms. Their internal systems are supposed to be pretty locked down so sending dodgy files to their internal systems should be difficult. Except it's still possible to do it via WhatsApp.

It certainly is, however endpoint security is the cool thing alongside. You want to connect to the internal network, you accept the endpoint software and policies

That's certainly what I'm seeing. Next generation firewalls are looking like obsolescence is coming for them sooner rather than later in favour of endpoint security for pretty much everything besides some use of NGFW for limited amounts of backhauled traffic.

Working from home + cloud + encrypted everything + SD-WAN/SDN isn't great for bits of tin sitting in offices doing firewall duty.

And they can get 3 years extended support for Win 7 - government price for extended support this year is pretty low cost.

In reply to a post by CarlTSpeak:

Working from home + cloud + encrypted everything + SD-WAN/SDN isn't great for bits of tin sitting in offices doing firewall duty.

The islands of security model, which my company seems to be moving to with heavily managed endpoints over the internet. VPN only required for legacy internal systems.

In reply to a post by jchamier:

Sure, and I bet many are still Windows 7.

Relatively recently I saw a Windows 2000 system being used by the RAF.

Hmmmm!

Plans to allow MPs to take part in some parliamentary business virtually have been approved by the body responsible for administration in the Commons.

The House of Commons Commission said ministers will be quizzed via Zoom for the first time in the House's 700-year history.

This "unprecedented step" will "keep democracy going" during the coronavirus crisis, it said.

MPs will have to approve the plan next week when they return on 21 April.

It means that up to 120 MPs will be able to take part in proceedings virtually at any one time, while 50 could remain in the chamber under social distancing rules.

…

The National Cyber Security Centre has advised the Commission that for public Parliamentary proceedings it considers the use of Zoom appropriate, if the installation and the use of the service is carefully managed.

"If".

I note that is for public proceedings, surely those that are documented in Hansard anyway, so were public on paper?

Hansard is available online too . As are full live television coverage of the House of Commons and some recorded Committee hearings plus some House of Lards sessions. (Freeview 232).

Typo is good, so left in .

In reply to a post by RobertoS:

Typo is good, so left in .