Popular Articles
-
Locations in the News
-
Cyber-Ark to Highlight Privileged Identity Management Risks of Virtualized Data Centers at VMworld
Explore Article saascloudcomputingvirtualization.blogspo
Cyber-Ark® Software unveiled details of its participation at the highly anticipated VMworld 2010 San Francisco conference. In addition to event presentations focused on the business benefits of cloud computing and virtualized data centers, Cyber-Ark will caution attendees about the harmful security risks posed by unmanaged and unmonitored privileged accounts within these environments. Cyber-Ark will introduce attendees to the emerging privileged identity management challenges facing virtualized data centers, and the increasing importance of managing, monitoring and controlling access to high-value applications and systems. Cyber-Ark will also explain the particular challenges for systems administrators who can no longer just focus on vulnerabilities presented by one system and one application—in virtualized environments they are responsible for almost limitless applications and data, with exponential security and compliance risks. Through an understanding of these challenges and establishing best practices for securing privileged identities and applications across the extended enterprise using the Cyber-Ark Privileged Identity Management ... -
IBM Rolls Out Compliance Software
Explore Article InformationWeek
Enhancements to BigFix platform include more than 200 upgrades in areas like virtualization management and user interfaces.Comment on Article Mentions: Paul McDougall IBM
-
Novell Announces General Availability of Novell Cloud Security Service
Novell Announces General Availability of Novell Cloud Security ServicePR Newswire (press release)WorkloadIQ is Novell's vision to deliver products for the rapidly growing intelligent workload management market, which IDC estimates is more than $4.2B. A ...and more »Comment on Article Mentions: IDC Ncss Novell Cloud Security Service
-
Playing it Safe: 10 Tips to Consider when Moving to the Cloud
Explore Article Intelligent Workload Management
Many managers are understandably cautious about moving to the cloud, yet it doesn’t have to be a daunting endeavor. Here are ten easy steps to mitigate risk as you begin leveraging cloud applications.
-
Measure and manage the risk inherent in your IT infrastructure
Explore Article NetworkWorld.com
You've got a limited budget to spend on IT security measures. Wouldn't it be nice to have an advisor tell you precisely how to apply your resources to improve the security of your infrastructure and reduce the inherent risks to your business? Prevari's Technology Risk Manager uses predictive analytics to show you your risk level and what you can do to mitigate the risks.Comment on Article Mentions: ISO
-
PCI Council Outlines Proposed Changes
The PCI Security Standards Council's proposed revisions for PCI DSS include additional guidance and clarifications to existing requirements in areas such as data discovery and virtualization. - The PCI Security Standards Council released a document Aug. 12 outlining proposed clarifications to be added to the future version of industry regulations. The PCI SSC document highlights several revisions slated to appear in the 2.0 versions of PCI DSS (Payment Card Industry Data Security Stan... -
Shop Talk: When Compliance and Legal Intersect
Explore Article Compliance Week
Any chief compliance officer worth his or her salt knows that the compliance function is supposed to report directly to the CEO or the audit committee—and that idea sounds great in theory. Most corporations, however, are not hurrying to achieve that transition. -
Protecting Identities in the Cloud
Explore Article Intelligent Workload Management
Last month, an AT&T security loophole allowed the e-mail addresses of 114,000 iPad 3G subscribers, including those of White House Chief of Staff Rahm Emanuel, journalist Diane Sawyer and Dow Jones CEO Les Hinton, to be exposed. How can such a blatant breach occur? Simple. Private information was st
Comment on Article Mentions: At&T
-
InfoWorld review: Meeting the network security and compliance challenge
Log management is one of those necessary tasks that every company should do, but that few companies do consistently well. Collecting and analyzing computer and device logs can pay off in many areas, including information security, operations management, application monitoring, system troubleshooting, and compliance auditing. A good log management solution can help with any -- or all -- of these efforts.Comment on Article Mentions: InfoWorld
-
Next Generation Compliance: Expect Answers
Explore Article Matt Flynn's Identity Management Blog
As an industry, we've been getting much better with understanding access rights and enabling compliance with access-related regulatory requirements. I know there are nay-sayers out there who focus on the negative - what we haven't done well. But, overall, given the speed at which we've enabled access to sensitive information, it's pretty amazing that we have any control at all.Having said that, one of the primary problems with our current solutions for tracking changes and enabling audit response is that we just can't make sense of all the data that's being collected. One of the findings in the SANS Log Management Survey for 2010 is that the top two challenges with log management are being able to search through the data and being able to interpret the results. That's no surprise given the mountains of data generated by log management solutions. But it's also alarming because that's the exact value ...
Comment on Article Mentions: SC Magazine
-
Answers, not data: The key to access security
Explore Article scmagazineus.com
Compliance TNG (the next generation) is the emergence of internal and external guidelines and best practices that are concerned with security rather than just compliance success.
Comment on Article Mentions: Siem
-
Audit Committee Checklist: Compliance Programs
Explore Article Compliance Week
In recent years, audit committee members have seen the scope of their responsibilities expand in all directions—but none so much as in their oversight of ethics and compliance. -
Virtualization, Cloud PCI Compliance Tips for Your Enterprise
Adoption of virtualization and cloud computing is not slowing down, and neither are the challenges facing businesses looking to migrate to the cloud. At the top of the list for many firms is maintaining security and compliance when moving from physical to virtual and cloud environments. Though an update of the PCI DSS (Payment Card Industry Data Security Standard) regulations is forthcoming and the PCI Security Standards Council has a special interest group looking at virtualization and how that maps to PCI, the council does not plan to release separate guidance on cloud computing. This means that businesses looking at the cloud may not get much detailed guidance on what to do. However, there are multiple sources for those searching for advice. With that in mind, eWEEK has compiled a list of the most important steps your business can take to make sure PCI compliance does not fall to the ...Comment on Article Mentions: PCI Security Standards Council Matthew Gardiner Bob Russo
-
What's missing in the market today?
Explore Article Intelligent Workload Management
The cost and flexibility of cloud computing make it particularly appealing. So what’s holding businesses back from moving to this agile new environment? In my opinion, it comes down to trust and technology. The number one hurdle is trust. Before we can consume cloud applications, we need assuranc
Comment on Article Mentions: Cloud Security Alliance
-
Analysing the brave new cloud world
Explore Article IT security news, reviews and opinion
Analysing the brave new cloud worldSC Magazine UKThe first step in understanding how cloud security services will evolve is to understand the scope of the term itself, says Seccombe. ...and more »Comment on Article Mentions: LogLogic Symantec John Pescatore
RSS Feed
Recent Comments
Rose80 » Cloud Security, Cyberwar Dominate RSA Conference
Interesting Article on Cloud Computing conference. Thanks for sharing it here. By the way have ...
See all recent comments