anonymous note at our office

would you trust this insurance company?

since i moved to my new apartment i thought i'd probably have to adjust my household insurance. i didn't have a clue how to proceed so i filled in my insurer's online form. they asked me how i would like to be contacted - "by email" i said. 

one day later i got this email: "unfortunately we don't have your phone number please call your contact person on xxxxxxxxx" - wow great. thanks for the email...

so i called. the first lady told me that i don't have a household insurance. according to her i was paying for some health insurance. right... why did it say household insurance on my policy then? rather confusing... in the end we agreed on the household insurance and i had to talk to my contact person. this guy then asked me whether a change in my policy was necessary... well, that was exactly what i wanted to know from him. whatever, in the end we had a plan what's to do :) and because they were very helpful and fast in processing stuff in the past i'm going to stick with them :)

my sister and me in zermatt :)

"interested at your assignment"

last saturday i got the following email:

Hi Tanja,
I am a Macquarie University student. I am doing my security management assignment and while I am searching on the web I found your article

mis neue 5000-wort-assignment

with the exactly the same assignment question that I am having.

Assignment #2
Management of Information Security is a balancing act between the goal of perfect security and the boundaries to which budget and resources will stretch. Based on your experimental company’s TRA, SoA and Scope Statement:
Provide a detailed plan for implementing an information security project to implement baseline controls. The plan should show resources, timeframes and expected costs and may be in Word, Excel or MS Project formats. Include narrative statements is using the latter two formats.
Describe in detail how you would escalate a security breach for the following:
Exposure of financial information relating to the company’s internal accounts;
Exposure of client and/or internal credit card details to a third party;
Theft of computer hardware from your site and from a parked car at a motel; and
Suspected hacking of your email and finance server(s).
In the above breaches, refer to the policies and procedures that should be used, the internal/external parties that should be informed/involved and show how the information assets are protected by the control strategies adopted within the TRA. If your controls are inadequate, describe how you would modify the TRA to reflect the changes required. What would be the costs involved and how would you promote the cost/benefits?
Identify the extent to which your processing environment is open to attack. Assume that you are using Microsoft Windows 2003, Solaris 10 and HP/UX servers, with Linux and WindowsXP desktops. Determine what controls are necessary to minimise interruptions to services. What is the likely cost for the controls?

Could you send me your assignment ? I am not sure how 's that how to escalate the breaches. I have to hand it in with 20 hours. Please help.
Regards, Gabriel.

too bad i saw it too late...
gabriel, if you're still following my blog, i can give you only one advice: enjoy milton's class, you'll learn something for life ;) - and he's rather kind in rating the assignments :)

work can be sooo hard...

i had to go to portugal for a course. it was an extremely busy time with loads to do. waaaay to much to tell here, so just check out the pictures :D ->

morcheeba, alicia keys, my sister and me in locarno

i guess i sometimes leave quite an impression...

this is what happened: today after work i went to look at another flat. there were also some other people there - nothing unusual. but then this one guy starts talking to me

guy: didn't you study economics at the university of zurich?
me: err... yes?
guy: right... i thought i remember you...
me: (shit, am i supposed to know him?) well... (maybe he participated in one of my tutorials?) i guess it was easier to remember faces for you guys, since there were less girls than guys...
guy: actually it was around 50%
me: *imaginary_blush*
guy: you did start 2002 too, didn't you?
me: yes (it feels like i've never seen him before...) but actually i studied business information systems
guy: oh that's why... i thought i only saw you the first two years...

considering that around 700 people started economics/business information systems in 2002 his memory must be really good :D