Bringing compliance under control

Bringing compliance under control

Date: Mar 06, 2009

This video explores key technologies that bring essential controls to organizations and help manage information flow and outline the must-have technology fixes for SOX, PCI, GLBA, SB1386, HIPAA and FFIEC.

About the presenter:
Trent Henry is a Principal Analyst for Burton Group's Security and Risk Management Strategies service.

More on Audit and compliance planning

PCI assessor and CISO: Work together for the best PCI ROC
News - In a session at the SOURCE Boston conference, a PCI assessor and a CISO explain that there are ways to arrive at a report on compliance they can both appreciate.
( Apr 19, 2012 )
Choosing the best security certifications for your career
Tip - Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
Security management plan reveals essential business security upgrades
Tip - As companies create their security management plan for the coming year, they should look to upgrades in Linux and Windows operating systems, Adobe applications and Internet browsers to improve their overall security position.
PCI DSS 2.0 and virtualization compliance for SMBs
Tip - PCI DSS 2.0, which debuts this month, includes key changes for SMBs in the areas of virtualization and vulnerability assessments. Expert Mike Chapple details the changes and explains what midmarket firms must do to comply.
PCI DSS requirement: Maintaining a vulnerability management program
Tip - The third PCI DSS focus area requires antivirus software, secure coding practices, patch management and change control processes be in place.

Back to top

More from Related TechTarget Sites

Security
Cloud Security
Consumerization
Financial Security
Security AU
Security IN
Computer Weekly

Security
- Using EMET to harden Windows XP and other legacy applications
  
  Expert Michael Cobb details how using EMET, a free tool from Microsoft, can harden Windows XP and other legacy applications.
- Beyond privacy policies: Practical privacy for websites and mobile apps
  
  Posting a privacy policy is not enough. Here's practical advice for privacy on websites and mobile apps.
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
Cloud Security
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
- How to use PCI SSC supplement to achieve PCI compliance in the cloud
  
  Ed Moyle examines highlights of the recently released PCI SSC information supplement that offers new details on achieving PCI compliance in the cloud.
- Cloud API security risks: How to assess cloud service provider APIs
  
  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.
Consumerization
- BlackBerry, VMware deliver dual persona features for mobile devices
  
  BlackBerry's Secure Work Space for iOS and Android will help heavily regulated companies or those searching for extra security to better support BYOD.
- How the consumerization of the enterprise has affected two firms
  
  The consumerization of the enterprise looks different in every company. Some firms are more open to new technologies and ways of working than others.
- Apple AirPrint and iOS printing alternatives: An IT overview
  
  Getting a document from a mobile device to paper is a hassle, but there are many options to help with iOS printing, including Apple AirPrint.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchSecurityAU
- Website vulnerabilities down, but progress still needed, survey finds
  
  A survey released by WhiteHat Security finds that website vulnerabilities have decreased steadily in recent years, though problems persist.
- Cloud API security risks: How to assess cloud service provider APIs
  
  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.
- How to configure a VLAN to achieve the benefits of VLAN security
  
  Expert Brad Casey explains how to configure a VLAN in order to achieve the benefits of VLAN security, including protection against insider attacks.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
- Mobile apps development: New threats or same security rules apply?
  
  Two security experts get up on their soap box about the steps software teams should take to secure applications throughout the apps' lifecycle.
Computer Weekly
- Dell sees profits plummet amid hardware freefall
  
  Dell saw profits plummet by 73% to $226m (£149m), as its first quarter results revealed its hardware division's profits to be in freefall
- Government spends £260m on e-prescribing
  
  Health secretary Jeremy Hunt commits £260m to e-prescriptions, as part of moves to make the NHS paperless by 2018
- Mahindra Satyam draws a line under turmoil
  
  Mahindra Satyam has drawn a line under the turmoil caused when a former Satyam director admitted to misreporting the company’s results

All Rights Reserved,Copyright 2009 - 2013, TechTarget