Compliance
Compliance-related resources to help firms comply with Sarbanes-Oxley (Sarbox), the Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley (GLB), and other government mandates.
Cloud Computing: You Can't Outsource Your Compliance Obligations
PC Users Admit to Pirating Software--$63 Billion Worth of It
Tue, May 15, 2012 - Software trade association reports that surging PC usage in emerging markets contributed to the economic losses from piracy; more than half of respondents to new survey admit that they pirate software at least occasionally.
Cloud, BYOD Increases Need for Automated IAM Systems
Fri, May 11, 2012 - As traditional security concepts of perimeter and end-point defense break down as a result of the proliferation of cloud services and the BYOD phenomenon, enterprises are increasingly feeling the need for greater control over access to applications. That's where automated identity and access management comes in.
Security Manager's Journal: SOX is Out of Control
Wed, May 09, 2012 - Complying with the act is consuming more and more time and detracting from real security work
Compliance isn't Security, but Companies Still Pretend it is, According to Survey
Thu, April 19, 2012 - According to the 2012 "HIMSS Analytics Report: Security of Patient Data" increasingly strict regulation and increased compliance from providers haven't slowed an increase in breaches over the past six years.
Oracle CSO Trashes PCI Rules
Fri, April 06, 2012 - Three-year-old requirement to release vulnerability details when found is misguided and dangerous, Davidson says
IT Must Change Security Strategies to Keep Up With Cybercriminals
Mon, April 02, 2012 - Businesses may have scaled back their security and risk management investments during the economic downturn, but cybercriminals continued to invest. In the coming years, criminal organizations will grow even more sophisticated. To be prepared for what's coming, organizations must adjust their approach to security now.
What's the Business Case for GRC?
Wed, March 28, 2012 - Does governance, risk and compliance (GRC) really pay off? It's a valid question for any organization that's looking to formulate a corporate strategy and implement software for managing GRC.
IT Must Provide Enterprise Collaboration Tools Employees Will Use
Tue, March 27, 2012 - Businesses are under pressure to enable collaboration beyond the corporate firewall as workers increasingly need to connect with remote colleagues as well as business partners, suppliers and consultants. The challenge to IT departments is that many employees are turning to email and consumer-grade file-sharing services to get their work done and exposing the enterprise to risk in the process.
Inadequate SSL Certificate Data Threatens IT Security
Fri, February 24, 2012 - SSL certificates are a fundamental component of secure online transactions, but a new survey finds that a majority of organizations don't know where or how many certificates they actually have, and nearly as many lack an accurate idea of which certificates are about to expire. Venafi CEO Jeff Hudson says this increases organizations' operational, security and audit and compliance risk.
12 Tips for Implementing GRC
Thu, February 23, 2012 - Driven largely by compliance requirements for the Sarbanes-Oxley Act of 2002, many organizations are adopting a governance, risk and compliance (GRC) tools to help manage their activities in these three areas. GRC suites and toolsets automate the collection, correlation and reporting of information to offer a broader picture of how well the company is not only performing, but also how well it is complying with the law and managing risk.
IPad 3 Expected to have 4G Connectivity
Tue, February 14, 2012 - Apple's next version of the iPad will feature 4G LTE connectivity on both Verizon Wireless and ATT, according to a Wall Street Journal report. The device, dubbed the iPad 3, is expected to be unveiled March 7 and may come with a higher-resolution display and a quad-core chip.
Tech Leaders Call for Global Harmony on Privacy, Security
Fri, January 27, 2012 - In the borderless digital world, tech and finance companies can get tangled up in a web of laws and regulations on privacy and data security.
How Open Source Licenses Affect Your Business and Your Developers
Tue, January 24, 2012 - Copyleft licenses have been the most popular choice for new open source projects. Recently, however, developers and companies seem to be moving from the GPL in favor of less restrictive permissive licenses for open source projects. What's behind the trend and how does it impact your business?
Android Developers Face Legal Hurdles in License Compliance
Thu, August 18, 2011 - Developers who make apps for Android have a lot more to worry about than just building great software.


