The Compliance & Security ConnectionA look at the complexities of securing privileged information in today's evolving IT environment and the impact growing compliance mandates have on daily IT operations. Technorati ProfileIntroduction to Effective Records and Data Management Programs- September 10, 2008 Today at 1pm Eastern, I will be participating in a webinar featuring Rebecca Bates Manno, Ken Tuggle, Bob Webb, and Bob Dibert, who are attorneys with the Louisville, Kentucky office of Frost Brown Todd LLC; and Michael Godin, a Senior Systems Engineer with Ecora Software. In this presentation, our presenters from Frost Brown Todd will teach you how to avoid the devastating problems that your company may face if it does not implement and maintain an effective records retention and dhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... ITIL version 3: One Year Later- September 9, 2008 It's been a little over a year since the introduction of version 3 of the IT Infrastructure Library (ITIL). Gary Anthes did a great job documenting "How to Get More Out of ITIL with Version 3" in the July 21st edition of Computerworld. In today's post, I'd like to share some of the points Gary made that stood out to me. Before we do that, let's touch onhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... Basics on the Federal Desktop Core Configuration standards- September 8, 2008 It was the end of March that all federal agencies were supposed to meet the Federal Desktop Core Configuration (FDCC) policy for all Microsoft Windows XP and Vista systems by using the Security Content Automation Protocol, otherwise known as SCAP (pronounced S-cap). Each agency is required to submit their FDCC reports to the National Institute of Standards and Technology (NIST). The FDCC policy came about using an interesting collaboration of numerous agencies working with Microsofthttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... What HIPAA Can Learn From PCI- September 7, 2008 There are plenty of people who have criticized the PCI Data Security Standard, including those that are already expressing objection to the next update of PCI-DSS. (I encourage you to check out Evan Schuman's thoughts on what PCI DSS 1.2 is missing in his post from August 22nd). Given some of the negativity that was expressed, the title of an article by John Carmichael in the June 18th edition of SC Magazine, a href="http:http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... Today's IT Top 10 lists- September 6, 2008 Ok, I know David Letterman really set the standard for Top 10 lists, but there seems to be no shortage of lists related to IT that come in 10s, 5s or some other numerical sequence. I happen to like lists, as they remind me of CliffsNotes from college - someone's attempt to boil down a fairly lengthy, often mind-numbing subject, into a much shorter, more understandable, summaryhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... Virtualization continues to grow, so how do you control the sprawl- September 5, 2008 According to recent research from IDC, "the pace of adoption of virtualized servers is incredibly rapid among organizations that are using virtualization, with 35% of servers purchased in 2007 being virtualized and 52% of those bought in 2008 expected to be so." Now, while this was research of the European market, it is pretty easy to assume that these increases are probably representative of the US market as well,http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... Questions about Information Security Learn from NIST- September 5, 2008 Keeping information secure in today's complex infrastructure's isn't easy. The value that criminals are getting for unsecured data, whether it's financial information, corporate secrets, or other data that can be used and sold with malicious intent, the challenge is not going to get any easier. One of my favorite blog authors is Mike Rothman and his Security Incite blog. I recently came across an article he'd written for a hhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... Data Loss Prevention is an International Issue- September 3, 2008 Steve Wright is a Senior Manager for Risk Assurance Services with PriceWaterhouseCoopers in the United Kingdom. Steve and I have worked collaboratively over the past year on a number of web presentations related to issues related to ISO 27001 and the PCI Data Security Standard. In fact, Steve will be doing a presentation with Ecora on How companies are using the PCI Data Security Standard for improving the Security & Performancehttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... What the Current Economic Uncertainty Means for IT- September 2, 2008 This has been a difficult period of time for all of us, on both a business and personal level. The rising cost of fuel has impacted us all, and nearly every region of the county has faced some type of significant weather-related challenge in the past six months. Now that the weather has improved and fuel prices have moderated some, people hahttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... HP Chief Security Strategist Shares 5 Steps to Safer Virtual Servers- September 1, 2008 Early last month, at the Black Hat conference, Chris Whitener, chief security strategist with HP Secure Advantage, shared the following five steps to safer virtual servers, in a story that was captured by Infoworld. 1. Protect your host operating system by using server hardening tools and methodologies 2. Ensure that your host OS is as secure as the guest operating systemhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/security-complia... |