The Compliance Authority Synopses


 Upcoming Webinar: 

December 15, 2009 Webinar
8:30 am PST/11:30 am EST

Register Here: https://www2.gotomeeting.com/register/433453835

We have noticed a surge in State Data Breach notification laws over the last 6 years. Now 45 State have it and it looks like Federal Data Breach legislation could be on the way. Meanwhile, European style law such as MA 201 CFR is about to be implemented. This shift is being very closely monitored by CSOs.

How is this trend affecting organization's security strategy, and what do you need to have in place to be prepared?

Recommend Attendees:
CSO, CISOs, CEOs, Compliance Officers, PCI DSS Project Managers

When: December 15, 2009
What time: 8:30 am PST/11:30 am EST
Speaker: Mathieu Gorge

Register Now


 Articles: 


Can the Card Brands STEP UP & be more than just an Enforcer?By Sean Inman, Security & Compliance Professional

PCI DSS is a great security baseline, but there is more to preventing breaches than just becoming PCI DSS compliant. How many more data breaches must occur in the payment card industry before the card brands step it up. Everyone in the payment card industry has the same objectives… Protect the cardholder data.

Click here to read the rest of the article.....




Good risk management lead to compliance?By Sean Inman, Security & Compliance Professional

This is a relatively a reasonable way of thinking, however there is one catch. Not all regulations are created to reduce risk. Think about PCI-DSS compliance by merchants.

Click here to read the rest of the article....




Compliance vs. SecurityBy Sean Inman, Security & Compliance Professional

I recently had the opportunity to catch up with some colleagues for lunch. We talked about how to measure and communicate enterprise risk. I wasn’t surprised by how these discussions immediately gravitated to the topic of regulatory compliance.

Click here to read the rest of the article....




Tips for Writing Information Security PoliciesBy Sean Inman, Security & Compliance Professional

I have been involved in the process of writing a number of documents including corporate security policies, standards & procedures & below are some of the most common questions that come up during this process.

Click here to read the rest of the article....




The InfoSec-Policy Based Management System (IS-PBMS)By Sean Inman, Security & Compliance Professional

In an early post I gave some Tips for Writing Information Security Policies. I’d like to continue with this topic and provide a frame work that will hopefully make it easier for you to develop all policies, standards & procedures needed for an Information Security Program.

Click here to read the rest of the article....




4 Steps to Managing Your Security DocumentsBy Sean Inman, Security & Compliance Professional

In an early post I gave some Tips for Writing Information Security Policies. I’d like to continue with this topic and provide a frame work that will hopefully make it easier for you to develop all policies, standards & procedures needed for an Information Security Program.

Click here to read the rest of the article....




PCI and the Emerging TechnologiesBy Sean Inman, Security & Compliance Professional

In an early post I gave some Tips for Writing Information Security Policies. I’d like to continue with this topic and provide a frame work that will hopefully make it easier for you to develop all policies, standards & procedures needed for an Information Security Program.

Click here to read the rest of the article....



>>>>>>>>>>>>>>>>>>>>>>>>>>>
If you would like to be removed from The Compliance Authority's weekly email distribution, please reply to this email with REMOVE in the subject line.