Information Security Expert James Kist: Web Application Security at Financial Institutions

Here’s a podcast from Information Security Media Group on a hot security topic: Web Applications. Listen as information security expert James Kist answers questions regarding how important web app security is for a financial institution. James Kist, CISSP, CCSI, CCSE, CCSA, is a senior Information Security Engineer with Icons, Inc. With more than 13 years experience in Information Technology, Kist has expertise in information security, application development, security system design and implementation, training, development and delivery of information security courseware. In the interview Kist talks about things that financial institutions don’t normally think of as being a risk to security and how penetration testing and the choice of right monitoring tools helps measure security.He also covers regulatory issues surrounding Gramm-Leach Bliley, the Payment Card Industry Data Security Standards and Sarbanes Oxley from an institution’s perspective. He shares his view on information security training and certification, and as an instructor, offers his tips on CISSP exam preparation, as well as the need to train information security professionals on web application security. Kist is a top-rated instructor and author on topics ranging from information security to system and network management and wireless technology. He has managed and implemented systems and networks for very specialized companies in information security. He regularly conducts penetration tests, vulnerability assessments, configures and manages firewall, and IDS installations.