Jonathan Lampe

Jonathan Lampe, CISSP has led the development of award-winning security software and supporting services for Standard Networks, Ipswitch, and SolarWinds. He holds computer science and business degrees from Northern Illinois University and the University of Wisconsin, and currently holds SANS GSNA and CCSK certifications in addition to his ISC2 credentials. When not coding, hacking, or writing, Lampe likes to spend time with his family in the beautiful Wisconsin outdoors.

Articles from Jonathan Lampe

CISSP exam questions: 5 drag & drop and hotspot questions

January 21, 2022

What are drag and drop and hotspot questions? See samples of what you'll see on the CISSP exam.

Learn More

Top 5 email retention policy best practices

May 19, 2018

Email retention policies are no longer just about conserving space on your Exchange server. Today you must take into account how your email retention control

Learn More

OWASP top ten testing and tools for 2013

February 27, 2018

In 2013 OWASP completed its most recent regular three-year revision of the OWASP Top 10 Web Application Security Risks. The Top Ten list has been an importan

Learn More

Phishing Simulation – How Do You Calculate Effectiveness and ROI? (Part 2 of 2)

June 3, 2016

In our first article about calculating the effectiveness and return on investment (ROI) of a phishing simulation, we discussed theoretical or model situation

Learn More

Phishing Simulation - How Do You Calculate Effectiveness and ROI? (Part 1 of 2)

May 6, 2016

We now know that the best way to instill people with a healthy degree of "inbox suspicion" is to flood them with harmless but realistic-looking phishing mess

Learn More

Doesn’t Any Presidential Candidate Know How to Secure WordPress?

October 21, 2015

As I researched the security awareness of the top five presidential candidates, Bryan Quigley published a quick list of what every candidate appeared to run

Learn More

OWASP ZAP Reconnaissance – Without Permission!

February 25, 2015

How To Assess a Third Party Web Site or Cloud Service with the OWASP ZAP Attack Proxy When You Don't Have Permission to Pentest As a security professional, y

Learn More

How to Test the Security of IoT Smart Devices

November 10, 2014

Just when we thought we had our applications secured, they pull us back in. No, this isn't a case of directory traversal bugs reappearing in IIS, access bugs

Learn More

Three Security Practices That IoT Will Disrupt

September 5, 2014

I made it back from DEFCON with both my phone and tablet intact, but I'm happy I didn't bring a light bulb. You see, if had brought a light bulb, and that li

Learn More

CompTIA Security+ SY0-401 vs. SY0-301 Changes [DECOMMISSIONED ARTICLE]

April 1, 2014

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.

Learn More

How to Perform a Safe Password Analysis

February 24, 2014

It's one of the most exciting moments in a security researcher's work: while looking through an obscure log file, you see strings like "James1984" and "Secur

Learn More

Beyond password length and complexity

January 6, 2014

(or "Why PCI-DSS-Compliant Passwords Aren't Enough" or "PCI-DSS-Compliant Password Analysis Reveals One-Quarter Still Trivially Compromisable") Thanks t

Learn More