News

News

  • January 17, 2008 17 Jan'08

    Getting compliance on the GRID

    The Object Management Group is attempting to build a database that may one day serve as a clearinghouse for all the world's IT-related regulations. Some say it's impossible, but others say it's badly needed to keep companies secure and out of the ...

  • January 17, 2008 17 Jan'08

    Banks scramble to boost online security

    Many banks will fail to meet a mandate to lock-down certain high-risk transactions over the Internet. But the largest banks are launching new security measures resulting in a surge of sales of identity and access management compliance products.

  • January 17, 2008 17 Jan'08

    Business survival 101: How to perform a business impact analysis

    A business impact analysis can be a manual that helps your company weather disasters. Here are some pointers on how to put one together.

  • January 17, 2008 17 Jan'08

    Q&A with RSA Security's Art Coviello

    This year's RSA Conference will be unlike any other in the past 16 years. RSA Security is now a division of storage and data management giant EMC, thanks to a $2.1 billion acquisition in July, just another indicator of how quickly and dramatically ...

  • January 16, 2008 16 Jan'08

    Visa hopes encouragement improves lagging PCI DSS adoption

    With deadlines looming, Visa is launching an education campaign to address the more than 60% of merchants that fail to meet the PCI Data Security Standards.

  • January 16, 2008 16 Jan'08

    How Chevron met the PCI DSS deadline

    Layered defenses made PCI DSS compliance easy, but one expert sees a need for improved wireless standards.

  • January 16, 2008 16 Jan'08

    SEC suspends trading of 35 companies over spam

    The Securities and Exchange Commission (SEC) suspended the trading of 35 companies connected to spam email campaigns as part of what it calls "Operation Spamalot."

  • January 16, 2008 16 Jan'08

    SEC document offers clues on TJX security failings

    If company execs need a lesson on what not to do before and after a data breach, experts say there's plenty to learn from a regulatory document TJX filed with the SEC Wednesday.

  • January 16, 2008 16 Jan'08

    HIPAA rules force health insurers to secure sensitive data

    Health insurance companies say HIPAA simply reflects rules they've had to live by all along. That doesn't mean every operation is ironclad.

  • January 16, 2008 16 Jan'08

    Credit union takes top-down approach to compliance

    Regulatory compliance can torture an IT staff, but it doesn't have to. One credit union met compliance regulations by consistently relying on its framework, policies and procedures.

  • January 16, 2008 16 Jan'08

    Updated records retention laws met with skepticism

    Amendments to rules governing electronic discovery are met with criticism by lawyers and compliance officers at a records retention event in NYC.

  • January 16, 2008 16 Jan'08

    Microsoft warns of Excel zero-day flaw

    Attackers are actively exploiting a zero-day flaw in Microsoft's Excel spreadsheet program, and users are being warned not to open files sent from unknown and untrusted sources.

  • January 16, 2008 16 Jan'08

    CPO: An enterprise point-person for privacy

    Many companies are formally creating privacy officers to ensure the confidentiality of data transferred between companies, business partners and customers.

  • January 16, 2008 16 Jan'08

    SEC: 404 budgets filled with waste

    The SEC slaps the hand of public accounting firms -- and tells C-level execs to get a better grip on SOX 404 requirements.

  • January 16, 2008 16 Jan'08

    Sarbanes-Oxley testing cuts could mean cost cuts

    Technology that could help public companies reduce their compliance activities is being embedded in SOX-compliant software. But to work, experts say external auditors must be on board.

-ADS BY GOOGLE

SearchSecurity

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

ComputerWeekly

Close