Page 266 - White Papers in Governance & Risk Management

Combating the Insider Risk to Data

While external threats to corporate data have made headlines, an even greater threat is posed by company employees. Sometimes, employees accidently expose sensitive data to the public by losing valuable data stored on a USB drive or laptop that is lost or stolen. At other times, disgruntled laid-off employees may...

The Business Justification for Data Security

"Noisy" threats like viruses, worms, and Trojans seem to get all the attention. But how aware is your CEO of the "quiet," insidious threats, like data loss and theft, which can have significant financial impact and may damage your company's brand? Often, investments in data protection are motivated solely by...

Sharing Sensitive & Proprietary Information Among Government Agencies

Part of the regulatory process all government agencies go through involves the sharing of sensitive and proprietary information. The efficiency of information exchange can help avoid a variety of disasters from cyber attacks to financial meltdowns. Now, with regulatory reform imminent, agencies have no choice but to...

3 Simple Steps to Ensure DIACAP Compliance

Successful operations are a matter of life and death at the Department of Defense (DoD). But with increasing reliance on information technology, and cyber threats around every corner, the agency takes security very seriously. Hence, the DoD Information Assurance Certification and Accreditation Process, or...

Five Ways to Reduce Your IT Audit Tax

Most organizations spend 30-50% more on compliance than they should 1. No matter the industry, with regulations such as GLBA, PCI, FISMA, SOX, and other regulations and mandates, it seems nobody is immune to scrutiny - but why spend so much more than what is necessary? In order to reduce the burden of an IT audit,...

Seven Practical Steps for Federal Cyber Security and FISMA Compliance

With new attention on recent security breaches of federal information systems, President Obama has issued a mandate that these systems undergo an immediate review for cyber security. But federal government agencies face numerous challenges, including the fact that FISMA compliance is often viewed as a time-consuming...

Protecting Sensitive Data in the Public Sector

e-Brief: Public Sector Trends and Best Practices Your ability to assure the effectiveness of your security programs - to protect sensitive data and critical systems - has a far reaching impact for your agency and all its constituents. Yet, in today's world of global access and awareness, government agencies face a...

Information Security Education: Expanding Career Opportunities Through Advanced Education at Regis University

With the Obama administration's focus on cybersecurity, this is a good time to start or move into an information security career. And Regis University in Colorado is one institution offering state-of-the-art education for undergraduates and graduates alike. In an exclusive interview, Daniel Likarish, faculty of the...

A Prudent Approach for Storage Encryption and Key Management

In this white paper, Jon Oltsik, Principal Analyst at ESG, cuts through the hype and provides recommendations to protect your organization's data, with today's budget. Oltsik shows you where to start, how to focus on the real threats to data, and what actions you can take today to make a meaningful contribution to...

Reliable & Scalable Security Infrastructure

In today's banking world, the importance of a comprehensive, reliable and scalable security infrastructure has never been greater. Thales HSMs have been used for over 25 years by a large number of banks worldwide mainly to protect customer PINs during credit and debit card transaction processing. More recently...

Privileged Access Control Support for NISPOM Compliance

The NISP Operating Manual (NISPOM) prescribes the requirements, restrictions, and other safeguards necessary to prevent unauthorized disclosure of classified information by US Government Executive Branch departments and agencies. NISPOM Chapter 8 addresses information-system security procedures and...

Helping Meet FISMA Compliance With EventTracker

The Federal Information Security Management Act of 2002 (FISMA) was passed with the purpose of improving computer and network security at government agencies and government contractors. The Act called for increased security standards and yearly audits of the systems and processes, and tasked the National Institute of...

How to Earn a Master's in Business Continuity: John Orlando, Norwich University

Fearful of man-made, natural and pandemic disasters, organizations everywhere are adopting or improving business continuity/disaster recovery programs. And at Norwich University, there now is a Master's of Science in Business Continuity program for mid-career professionals to hone their skills in this in-demand...

How to Earn a Master's in Information Assurance: John Orlando, Norwich University

It's become a cliché: Information security professionals need to get closer to the business. Now it's also a Master's degree program in which instructors base their whole curriculum on helping security professionals get closer to - and rise higher in the ranks of - their companies and agencies. In an exclusive...

A Focus on Security Yields Compliance for Free

Over the years, security and compliance experts at ReymannGroup have performed numerous compliance reviews and risk assessments. Through these engagements and other forums, we have engaged hundreds of executives in discussions about the need for a comprehensive and strategic approach to data security and compliance....