risk assessment

Security news about something other than LulzSec: FBI nails bank-account hackers

Posted June 23, 2011 - 10:01 am

It took cooperation from cops in U.S., Ukraine, Latvia and eight other countries to investigate and nail one 16-geek bank-robbing hacker gang. Good result; process does not scale.
- Quick Read
- Like
- Tweet
Skype is one more example of why to trust the cloud but wear a parachute

Posted May 27, 2011 - 9:40 am

Skype's outage is apparently due to corruption in client-side files -- much different from the cause of outages at Amazon and Azure. The reason doesn't matter; the contingency plan does.
- Quick Read
- Like
- Tweet
Sony managers could have stopped security disasters by talking to each other

Posted May 26, 2011 - 12:54 pm

Governance, risk assessment and compliance are boring; they're also the processes that let companies deal with the fall of one domino before it brings the whole chain down.
- Quick Read
- Like
- Tweet
ISO 27001 certification: 6 things you need to know

Posted January 17, 2011 - 8:11 am

Be warned: For most organizations, the time and costs associated with ISO 27001 certification are much greater than a consulting firm being onsite for a week. The process involves dedicated effort and, most of the time, culture shock.
- Quick Read
- 1 comment
- Like
- Tweet
Firewall audit and big-picture risk assessment

Posted May 13, 2010 - 1:34 pm

Generally speaking, firewall audit tools evaluate individual firewalls, even if they can do so for hundreds of them. Some are slowly moving toward a more networkwide risk-assessment approach and the ability to evaluate not only each device, but how devices relate to one another--their mutual dependencies across the network.
- Quick Read
- Like
- Tweet
IT risk assessment frameworks: real-world experience

Posted May 3, 2010 - 7:57 pm

Formal risk assessment methodologies try to take guesswork out of evaluating IT risks. Here is real-world feedback on four such frameworks: OCTAVE, FAIR, NIST RMF, and TARA.
- Quick Read
- Like
- Tweet
Video

Steps to Secure Data

Posted January 25, 2010 - 10:02 am

In order to secure your data in 2010, the first steop is knowing what type of data you hold and what regulatory standards you need to comply with.
- Quick Read
- Like
- Tweet
Three Global Risks to Business in 2009

Posted December 29, 2008 - 9:52 am

Control Risks, an independent, specialist risk consultancy, recently released its 2009 annual forecast of the global political and security risk environment. In this interview, Control Risks analyst and author Daniel Linsker discusses some of the highlights that businesses need to consider before investing.
- Quick Read
- Like
- Tweet
Building C-level confidence with a security blueprint

Posted September 25, 2008 - 10:56 am

IT organizations deploy a number of strategies and frameworks to assess their organizationâ€™s risk and security posture â€“ everything from ISO to COBIT. But while these frameworks are often helpful to security professionals and IT risk champions, they do little to help communicate the business value of IT and risk to various business leaders within the organization. Here's where a security blueprint can help.<
- Quick Read
- Like
- Tweet

February is...
Open Source Month

FEATURE: Spotlight on open source
TRAINING: Win FREE Java training from ITworld and Webucator
CAREER: What to Include in Your Open Source Resume
LIST: 10 best (unknown) open source projects

Sponsored by Oracle.

Free downloads.
Become an today.

See more

content

Ask a Question