Articles on Compliance Management

Compensating Controls = Quick Fix at High Cost: Taking "the Easy Way Out" to Satisfy PCI DSS Requirement #3 Carries its Own Risks
BY GARY PALGON, NUBRIDGES, INC.

Sensible Security: Are Staff A Security Risk, And Are You To Blame?
BY DAVID KELLEHER, GFI SOFTWARE

A Friendly Reminder: Compliance Does Not Equal Security
BY ARI TAKANEN, CODENOMICON

Learn To Avoid Data Fiascos, Or Risk New FSA Penalties
BY ALAN CALDER, IT GOVERNANCE LIMITED

Don't Let EFS Trick You: Tips On Recovering EFS-Encrypted Data When It Gets Lost
BY VLADIMIR KATALOV, ELCOMSOFT

Forecasting Compliance Strategies for 2009
BY DOMINIQUE LEVIN, LOGLOGIC

The Problem of Silos
BY SUMNER BLOUNT, CA, Inc.

Compliance in the Cloud: Part 2—The Industry Focus
BY JIM HIETALA AND MARK WILLOUGHBY, COMPLIANCE RESEARCH GROUP

Testing Times—Here's One Sure Route To Optimal Security At Minimum Cost
BY MARTIN VICKERY, SPIRENT COMMUNICATIONS

Cradle to Grave—Data Recovery 2.0
BY ALASTAIR MOLYNEUX, KROLL ONTRACK

Managing the Mergers & Acquisitions IT Nightmare in the Firewall Team
BY DAVID AMNIZADE, TUFIN TECHNOLOGIES

Is Having a Security Policy in Place Really Nine-Tenths of the Law?
BY DAVID AMINZADE, TUFIN TECHNOLOGIES

Invest in Information Security to beat downturn risks
BY ALAN CALDER, IT GOVERNANCE LIMITED

IT administrators go 'rogue': minimising the threat from inside
BY MARC HUDAVERT, ACTIVIDENTITY

How PCI Leaders are Different from Other Merchants
BY DAVE TAYLOR, PCI ALLIANCE

Making the Best Use of Your Security Budget in Lean Times: Four Approaches
BY ELIZABETH IRELAND, NCIRCLE LTD

Arguments against Tokenization as Tool to Replace Card Data
BY DAVE TAYLOR, PCI ALLIANCE

Absence of Evidence Does Not Equal Innocence
BY PAUL THACKERAY, BARRACUDA NETWORKS

PCI Leadership: Compliance vs Security
BY DAVE TAYLOR, PCI ALLIANCE

The Principles of eDiscovery: Managing Electronic Content
BY BOB LARRIVEE, AIIM INTERNATIONAL

PCI Lessons from the Processing Trenches
BY AARON BILLS, 3DELTA SYSTEMS, INC.

Ensure that Your IT Policies and Procedures Comply with Data Security Standards
BY MATTHIEU GORGE, VIGITRUST

Extending PCI Standards to Protect All Confidential Data, Part 2
BY DAVID TAYLOR, PCI ALLIANCE

Virtualization: What are the Key Steps?
BY TREVOR DEARING, JUNIPER NETWORKS

Security—The Human Factor
BY PAUL KEARNEY, BT GROUP

Extending PCI Standards to Protect All Confidential Data
BY DAVE TAYLOR, PCI ALLIANCE

Managing Compliance in the Cloud:
Part 1
BY JIM HIETALA AND MARK WILLOUGHBY, COMPLIANCE RESEARCH GROUP

9 Steps to Halt Data Breaches
BY ALAN CALDER, IT GOVERNANCE LIMITED

Why More Security Breaches of PCI Compliant Companies are Likely
BY DAVE TAYLOR, PCI ALLIANCE

I.T.'s Dirty Little Secret—Privileged Passwords
BY MARK FULLBROOK, CYBER-ARK

Public WiFi Security Tips
BY DAVID HOBSON MD, GLOBAL SECURE SYSTEMS (GSS)

The Top Ten Data Security Myths
BY GORDON RAPKIN, PROTEGRITY

What's Really Going on with Media Labeling
BY DORIAN COUGIAS, UNITED COMPLIANCE FRAMEWORK

Does Size Matter? When it Comes to Security, the Answer is Yes
BY GREG DAY, MCAFEE INTERNATIONAL LTD.

Is Having a Security Policy in Place Really Nine-Tenths of the Law?
BY DAVID AMINZADE, TUFIN SOFTWARE LTD

Security Controls are Useless—If They're Not Turned On
BY DAVE TAYLOR, PCI ALLIANCE

Virtually Compliant: How Implementing New Technology Can Make Your Company Non-Compliant
BY DAVE TAYLOR

Does Web 2.0 mean Threat 2.0?
BY ALAN CALDER, IT GOVERNANCE LIMITED

Avoid data breaches with secure file transfer
BY GARY SHOTTES, IPSWITCH FILE TRANSFER DIVISION

Predictions for 2009: what my favorite writers of the past have to say about our future
BY DORIAN COUGIAS, UNITED COMPLIANCE FRAMEWORK

Digital Fingerprints—who knows where you have been?
BY GREG DAY, MCAFEE INTERNATIONAL LTD

Is PCI Worthless?
BY DAVE TAYLOR

Lies, Damned Lies and Statistics
BY CALUM MACLEOD, CYBER-ARK

What is the Essence of Governance?
BY DORIAN COUGIAS, UNITED COMPLIANCE FRAMEWORK

ISO, ITIL, & CobiT Together Foster Optimal Security Investment
BY MARY JOHNSTON TURNER, JOE OLTSIK AND JOHN MCKNIGHT

Paper Compliance vs Operational Compliance: Where is Your Company?
BY DAVE TAYLOR

Implementing IT-GRC: Five Biggest Pitfalls in IT Governance, Risk, & Compliance
BY PROFESSOR SANJAY ANAND

So Long Silos—Move Beyond Silos to an Integrated, Automated Approach
BY JIM HIETALA

Assessing the ROI for IT Compliance
BY DR. VICTOR BERLIN

Are Your Stores Worth Stealing From
BY DAVE TAYLOR

A Compelling Argument for Automated Code Testing
BY PROFESSOR HOWARD A. SCHMIDT

The CORES of Compliance
BY TOM DIAMOND

Contrasting Payment Card Industry Data Security Standard (PCI DSS) Compliance Solutions with a Best Practices Approach to Information Security
BY ALAN BELSHAW

Compliance Training: Quick and Cost-Effective with Online Learning
BY CHARLIE GILLETTE

Moving from Vulnerable Code to Vulnerable Service: The IT Compliance Challenge
BY RON MEYRAN

Adapt Or Be Left Behind: The Changing World of Compliance within the United States Department of Defense
BY SETH COWAND AND ROB AYOUB

Global Compliance Initiatives: What do They Mean for Me?
BY ROB AYOUB

The Role and Responsibility of a Chief Compliance Officer
BY GUY F. TALARICO, J.D.

From IT Compliance to IT Governance - Managing Risk Within the IT Organization
BY SANJAY ANAND

What can Government Agencies (like the SEC) Teach You About Compliance?
BY DAVID WILSON

Technical Challenges to Electronic Discovery
BY RUSSELL SHUMWAY

Categorizing a System: Why must this be so hard?
BY GARY TARBET

Compliance Training: Quick and Cost-Effective with Online Learning
BY CHARLIE GILLETTE

Your Security Log Files Are a Discoverable Liability
BY DAVE TAYLOR

Minding Your Partner's Security—A "Weakest Link" Scenario
BY DAVE TAYLOR

Tokenization, Part 2—How Static is Your Data?
BY DAVE TAYLOR

Tokenization—You don't Have to Protect Data You Don't Have
BY DAVE TAYLOR

Your Security Log Files Are a Discoverable Liability
BY DAVE TAYLOR

Is PCI a "mission accomplished?"
BY DAVE TAYLOR

Global Compliance Initiatives: What do They Mean for Me?
BY ROB AYOUB

The Role and Responsibility of a Chief Compliance Officer
BY GUY F. TALARICO, J.D.

Governance and The Board of Directors: Taking IT from the Backroom to the Boardroom
BY SANJAY ANAND

Information Technology Compliance Best Practices
BY ALAN BELSHAW

Information Systems Security Engineering in the Acquisition of Secure Information Systems
BY BRYAN S. CLINE

Winning Cooperation with the Magic Question "Why?"
BY MARGARET E. ANDERSON

Addressing Multiple Compliance Regulations
BY ALEX ZADROZNY

Identity Auditing: Key to Successful IT Compliance
BY TOM REPEDE

Five Core Competencies of IT Compliance Six Sigma
BY CHRISAN HERROD

Sponsor/Partner Offers

University of Fairfax
Let your INFOSEC career soar! A Fellowship can help you earn an INFOSEC MS/PhD online. Read more >>