Driving Compliance: What We Have versus What We Need

gears_150

By Jim McFee A common statement an auditor hears is, “our IT department is mature; we have everything we need for an IT Audit.” A common thought an auditor thinks is, “yeah, right.” So which of these statements is more accurate? More importantly, which one increases or decreases risk? Without creating a laundry list, let’s [...]

Getting Behind the Wheel: Driving Audit and Compliance

“Pass on all hills and curves.”  ~Author Unknown The concept of the audit, to some, may feel relatively new and immature. However, financial statements have been audited since the 1800s and regulated IT Audits got a footing in the 1970s. The challenge in making sense of audits is in the approach: are you driven by [...]

The First Brick: Understanding Identity Management

What is Identity Management? Identity Management (IDM), or Identity and Access Management (IAM), is a suite of products that work together (more or less cohesively) to manage users and their access/passwords across the enterprise. Most identity management product suites consist of three or sometimes four parts: -        Role manager -        Identity manager -        Access manager [...]

Into the Breach – Audio Book Chapter – 3 “Breaking the Security Diet”

itb-audioseries-150px

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio [...]