Audit and compliance planning, Choosing security services, End user training and awareness, Risk assessments and metrics, Writing and enforcing security policies
Microsoft Windows configuration and patch management, Microsoft endpoint security management, Microsoft identity and access management, Microsoft security integration and centralized management, Microsoft security threat management
Detecting and preventing network intrusions, Integrating security into networks, Managing firewalls, Network access controls, Wireless network security management
Antivirus, antispyware management, Configuration and patch management, Integrated security appliances and systems, Security vulnerability management
A sound Information Security program must have the right technologies in the right places while also implementing the appropriate policies and procedures. By using risk management methodologies, creating formalized architecture diagrams and developing disaster plans, you'll be prepared for whatever comes your way.
Explore best practices and real life applications today in our new eBook: Creating Effective Policies and ProceduresHIPAA compliance services can lead to solid business growth for solution providers. Kevin McDonald's HIPAA security checklist has 10 ways to begin.
VARs expect customers to increase spending on security more than any other IT area in 2012. See which security segments will grow the most.
Blogging can produce new leads for security solution providers. Focus on content in your computer security blog that connects with customers.
Organizations face a March 1 deadline for ensuring their cloud and other service providers comply with Massachusetts’ data protection regulation.
Deciding whether your cloud provider is a business associate comes down to a judgment call based on the type of cloud usage.
A look at SaaS encryption techniques and challenges.
Flaws in Internet Explorer and the Windows C Runtime library could be used to gain access to system files and download additional malware onto a victim’s machine.
Centrify mobile security supports Apple iOS and Google Android devices and can connect them to Microsoft Active Directory, but it lacks the robust management features found in major MDM suites, analyst says.
Survey of more than 2,000 IT security pros finds many getting raises and promotions despite lagging economy and tighter IT budgets.
A reader asks how to judge the security of open source software products. Expert Michael Cobb lists three areas to check.
A study finds attackers targeting firms with poor patch management policies, exploiting vulnerabilities that should have been patched years ago.
New DDoS statistics suggest hactivist groups are to blame for an increase in the number and types of DDoS attacks across the Internet.
CIO Tom Gainer found that deploying virtualized desktops and disaster recovery was the quicker path to cost savings and recovery times. Server virtualization, not so much.
CIOs can harness the power of data mining using the free Apache Hadoop framework, but is there such a thing as free big data analytics?
When a major EHR system project stalled, the finger pointing ensued. COMHAR’s CIO put a stop to the blame game and began to get business value out of the EHR project.
With the number and severity of breaches increasing, data protection strategies are vital. To help, the Online Trust Alliance has released a guide to online data protection.
Upgrading equipment? Proper disposal of used computers is necessary to reduce risk, because sensitive data is vulnerable when old electronics go out the door.
With the increased interest in going green, sustainability and compliance are now directly related. But making sustainability integral to your compliance operation is not easy.