-
H1N1 planning for your organization: An essential guide
There are some things that every company should do as part of their H1N1 planning. Discover how to prepare for a possible swine flu outbreak so your business can continue to operate smoothly and securely by downloading this exclusive eBook now. E-Guide
-
Midsized businesses not immune to attacks, data breaches, survey finds
Midsized firms are seeing increased attacks and a rise in data breaches, according to the survey conducted by London-based Bloor Research. Article | 13 Oct 2010
-
Midmarket security managers must push risk acceptance to the business
Experts at the 2009 RSA Conference say midmarket security managers must work with business leaders to define acceptable risk, and transfer risk prioritization to them when appropriate. Article | 23 Apr 2009
-
A step-by-step SMB IT security risk assessment process
Assessing your organization's security threats and risks takes just five steps, says Robbie Higgins. Check out his quick guide to the SMB security risk assessment process. Tip
-
PCI DSS 2.0 and virtualization compliance for SMBs
PCI DSS 2.0, which debuts this month, includes key changes for SMBs in the areas of virtualization and vulnerability assessments. Expert Mike Chapple details the changes and explains what midmarket firms must do to comply. Tip
-
How to create a compliance, audit program
When it became difficult for everyone to keep up with internal audit obligations, Diane Kissel, IS risk and compliance manager at the facility, helped create a compliance program. Tip
-
Are you too small for an email retention and archiving policy?
Joel Snyder reviews how organizations, both large and small, should prepare their email retention and archiving policy. Tip
-
Encryption basics: How asymmetric and symmetric encryption works
Before you encrypt your files, emails and Web transactions, make sure you know the cryptography basics. Tip
-
Secure data destruction using a bootable Windows CD
Tom Chmielarski reveals how one free, easy-to-use tool may be what prevents your valuable hard drive data from being sold on eBay. Tip
-
Intelligent threat management podcast
Listen to this podcast featuring security guru Joel Snyder to find out how and where to spend your security dollars to make the most impact. Learn unique ways of leveraging existing threat management investments to provide more insight into your secu... Tip
-
Midmarket security governance: Develop an IT engagement model
Midmarket IT organizations may follow an engagement model that facilitates the integration of information security into the business. Tip
-
Assess your security state in five steps
Prioritize your security spending by identifying how data moves and users interact, and what vulnerabilities exist in infrastructure, systems and applications. Tip
-
Questions to ask when choosing your managed security service provider
Outsourcing security services forces midmarket IT organizations to ask tough questions about a provider's capabilities and business model. Tip
- See More: Tips on Risk assessments and metrics
-
risk analysis
Risk analysis is the process of defining and analyzing the dangers to individuals, businesses, and government agencies posed by potential natural and human-caused adverse events... (Continued) Word
-
Securosis takes aim at midmarket security needs
Editorial Director Michael S. Mimoso talks with the crew at analyst firm Securosis about how the company's research will target midsized companies. Podcast
-
Marcus Ranum on cyberwarfare, infosec careers
At 2009's Information Security Decisions conference, security expert Marcus Ranum sat down to answer some of readers' security questions. Video
-
A step-by-step SMB IT security risk assessment process
Assessing your organization's security threats and risks takes just five steps, says Robbie Higgins. Check out his quick guide to the SMB security risk assessment process. Tip
-
PCI DSS 2.0 and virtualization compliance for SMBs
PCI DSS 2.0, which debuts this month, includes key changes for SMBs in the areas of virtualization and vulnerability assessments. Expert Mike Chapple details the changes and explains what midmarket firms must do to comply. Tip
-
Midsized businesses not immune to attacks, data breaches, survey finds
Midsized firms are seeing increased attacks and a rise in data breaches, according to the survey conducted by London-based Bloor Research. Article
-
How to create a compliance, audit program
When it became difficult for everyone to keep up with internal audit obligations, Diane Kissel, IS risk and compliance manager at the facility, helped create a compliance program. Tip
-
Are you too small for an email retention and archiving policy?
Joel Snyder reviews how organizations, both large and small, should prepare their email retention and archiving policy. Tip
-
Encryption basics: How asymmetric and symmetric encryption works
Before you encrypt your files, emails and Web transactions, make sure you know the cryptography basics. Tip
-
Secure data destruction using a bootable Windows CD
Tom Chmielarski reveals how one free, easy-to-use tool may be what prevents your valuable hard drive data from being sold on eBay. Tip
-
Securosis takes aim at midmarket security needs
Editorial Director Michael S. Mimoso talks with the crew at analyst firm Securosis about how the company's research will target midsized companies. Podcast
-
Intelligent threat management podcast
Listen to this podcast featuring security guru Joel Snyder to find out how and where to spend your security dollars to make the most impact. Learn unique ways of leveraging existing threat management investments to provide more insight into your secu... Tip
-
Marcus Ranum on cyberwarfare, infosec careers
At 2009's Information Security Decisions conference, security expert Marcus Ranum sat down to answer some of readers' security questions. Video
- See More: All on Risk assessments and metrics
About Risk assessments and metrics
Learn how to assess and correlate the risks to your IT systems and networks, and produce relevant metrics that you can use to analyze threats to your organization, or present a case to management for additional IT resources. Also, learn about risk management frameworks and metrics, and how to build a risk management strategy with proper requirements, responsibilities and controls.