Security

Thu, July 03, 2008 - Full compliance should never be confused with robust security. One does not beget the other and, at times, changes called for by compliance rules can have a detrimental effect on an enterprise's overall security posture.

Fri, June 27, 2008 - Monday is the day merchants must be in compliance with PCI DSS Requirement 6.6. That means the security vendor PR machine is in overdrive.

Fri, June 13, 2008 - When conducting a security review to determine assets and risks, internal configuration of a company's computer systems is often overlooked because it is assumed to contain non-confidential data. However, in the hands of a skilled attacker, even the most innocuous piece of data can be used to attack the system and gain access to the crown jewels.

Wed, June 04, 2008 - IT executives are overconfident about their ability to respond to a litigation event, reports a new study. There's an urgent need for organizations to adopt standardized policies and IT practices for activities related to the identification, preservation and collection of potentially responsive data. The existence of ad hoc and manual business processes exposes companies to potential litigation.

Mon, June 02, 2008 - A surge in the video surveillance software market will allow companies and governments to increasingly watch people, will create privacy issues, ABI says.

Mon, May 19, 2008 - If you're cutting costs to improve your bottom-line revenue, don't. Spending money can position your company for long-term cost reduction. Read on for these and other tips on how CIOs are spending during an economic downturn.

Tue, May 06, 2008 - Security assessments are tedious, but they reduce risk and are worth the time. And efforts are underway to simplify and automate the process.

Wed, April 30, 2008 - Pepperdine University's CIO shares advice on how he implemented an e-mail alternative solution that cut costs, saved storage resources and addressed security problems.

Wed, April 30, 2008 - An effective IT risk management program should provide the board of directors, senior management, regulators and other stakeholders with the confidence that IT can deliver business value efficiently and securely while providing high-quality assurance around data integrity, availability and confidentiality.

Thu, April 10, 2008 - A CIO responsible for donating end-of-life computers shares her experiences with data security technology and managing used technology in a secure and environmentally friendly way.