Audit and compliance planning, Choosing security services, End user training and awareness, Risk assessments and metrics, Writing and enforcing security policies
Microsoft Windows configuration and patch management, Microsoft endpoint security management, Microsoft identity and access management, Microsoft security integration and centralized management, Microsoft security threat management
Detecting and preventing network intrusions, Integrating security into networks, Managing firewalls, Network access controls, Wireless network security management
Antivirus, antispyware management, Configuration and patch management, Integrated security appliances and systems, Security vulnerability management
Biometric authentication helps ensure only authorized smartphone users can access a network. David Jacobs weighs the pros and cons of three methods.
The Vault partner program uses incentives to increase visibility for F5 firewalls and its architecture bundle.
DMARC aids the DKIM and SPF protocols that help keep spam out and let legitimate emails in. David Jacobs explains how.
Organizations can boost PaaS security late in the game by implementing these stopgap measures.
Think you understand cloud-specific security technologies as well as expert Joseph Granneman does? Test your knowledge with this quiz.
Plan calls for working with certification bodies, government agencies, as well as an independent CSA certification.
A PCI Council guidance document requires merchants to use a validated PIN entry device or secure card reader to accept payments using mobile devices.
Microsoft’s senior director of security engineering says core SDL principles should be at the foundation of critical infrastructure system protection.
At Information Security Decisions 2012, Dan Guido put the mobile malware focus on the Android security model and Google’s mobile app vetting process.
For the first time, the ICO fines an NHS organisation for sending patient data to the wrong person.
As employees make payments on their mobile devices, the security team must act quickly to ensure corporate assets remain secure.
Just days after SOCA shut down carder sites, the agency was the victim of a DDoS attack, leading SOCA to takes its website offline.
Find out how one IT leader uses smart grid systems to affect change and drive business transformation.
Our IT Leadership Awards judge notices several things our award winners have in common, and reveals the keys to getting noticed -- and getting ahead.
IT exec Chris Lambrou built a custom Web application for the real-estate market, and solved a problem that had stymied lending giants.
Advanced technologies create more data than ever for companies to protect, but it's not all bad news. Here's why using the latest cutting-edge tools can help your GRC strategy.
The GRC technology market has become increasingly targeted but companies' buying decisions have not followed suit. How can you make sure you're getting the most bang for your buck?
Technology law expert Jeffrey Ritter discusses the obstacles to governing social media security in 21st century business and what companies can do to protect their information.