September 3, 2010

Into the Breach – Audio Series – Chapter 10 (Reducing the Cost of Compliance)

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio [...]

How Virtualization Affects GRC

By Dave Shackleford Virtualization technology is becoming ubiquitous. More and more organizations are replacing physical infrastructure with virtualized systems, including desktops and servers, and application and storage virtualization are popular as well. Virtualization changes a number of paradigms across the information technology landscape – some obviously for the good, some possibly for the worse. In [...]

7 Reasons Why Your Company Needs a Privacy Policy

Old Phone Dial 150 x 150

Non-attorneys are often (justifiably) baffled at why lawyers take 3,000 words to say what normal people say in 300 and a handshake. At the risk of defending verbosity, it turns out that behind each handshake contains a wide range of non-standard assumptions. Many (if not most) disputes arise when there is a misunderstanding about an [...]

Security From Scratch: Using Compliance For Good

superhero

by Dennis Kuntz “This isn’t just a legal compliance issue for us. We consider the privacy issue to be an opportunity to reinforce our brand image.” – Tom Warga, SVP and General Auditor, New York Life Insurance Co. Early in my career I accepted a job rich with challenges and opportunities. It was for a [...]

Driving Compliance: What We Have versus What We Need

gears_150

By Jim McFee A common statement an auditor hears is, “our IT department is mature; we have everything we need for an IT Audit.” A common thought an auditor thinks is, “yeah, right.” So which of these statements is more accurate? More importantly, which one increases or decreases risk? Without creating a laundry list, let’s [...]

Getting Behind the Wheel: Driving Audit and Compliance

“Pass on all hills and curves.”  ~Author Unknown The concept of the audit, to some, may feel relatively new and immature. However, financial statements have been audited since the 1800s and regulated IT Audits got a footing in the 1970s. The challenge in making sense of audits is in the approach: are you driven by [...]

Amplifying the Good: The Security Catalyst Online Experience 2010

As the snow starts to cover the ground in Upstate New York, my thoughts are already turning to the year ahead. I’m not at all disenchanted with the Holidays; I’m just excited about the journey ahead with the Catalyst onTour RV adventure. Equally exciting to me is the programming that will be presented by the [...]

FTC Says Bloggers Must Disclose Freebies

A Closer Look at the Money

by Aaron Titus The FTC recently announced new guidelines requiring bloggers to disclose when they get freebies in exchange for reviews. Adopted by a vote of 4-0, this is the first update of the FTC’s Guides Concerning the Use of Endorsements and Testimonials in Advertising in 29 years. The rules go into effect on December [...]

Into the Breach – Audio Series – Chapter 3 (Breaking the Security Diet)

itb-audioseries-150px

Welcome to the continuation of the Into the Breach: Protect Your Business by Managing People, Information and Risk audio series. (Click this link) to learn more about this how this book solves today’s challenges and pick up a complete copy. This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged audio [...]

Into the Breach – Audio Series – Chapter 2 (People Just Want to Do Their Jobs)

itb-audioseries-150px

Welcome to the audio series of Into the Breach: Protect Your Business by Managing People, Information and Risk (click this link to learn more about this book and pick up a complete copy – to get started on your personal journey). This series, underwritten by Configuresoft, now part of EMC, is the full and unabridged [...]