Home
Topics
Security management strategies
Data governance best practices
Internal compliance program for Massachusetts data protection law

Internal compliance program for Massachusetts data protection law

Internal compliance program for Massachusetts data protection law

Date: Jun 14, 2010

Having a holistic internal compliance program is crucial to successfully complying with data security and privacy regulations.

In this video, Rick Gammell, director of enterprise information risk management at MassMutual Financial Group, describes how his company tackled compliance with the Massachusetts data protection law.

More on Data governance best practices

GRC for financial firms: Managing risk, vendors and change
VIDEO - Learn about managing risks, vendors and change in the first part of a two-part interview with financial-services security expert Eric Holmquist.
GRC for financial firms: The latest threats
VIDEO - In this video, expert Eric Holmquist explains what to look out for in the current threat landscape, including Automated Clearing House (ACH) fraud. He also discusses pandemic planning and how tabletop exercises are critical for successful disaster recovery planning.
Seven GRC best practices for information security
VIDEO - Learn the seven most important practices to use when implementing governance, risk and compliance at your enterprise.
wipe
Definition - Wipe, in a computing context, means to erase all data on a hard drive to render it unreadable. The term is often used in reference to making data stored on a computer, smartphone or tablet inaccessible before disposing of the device.
Shifting to a flexible information security framework
Tip - Financial-services executives often view information security as locks and keys that impede business, which makes it hard for security to win funding. In this tip, Randall Gamby explains how adopting an information security framework built on the idea of information security as a business enabler will help bridge the gap between security professionals and business managers.

Back to top

More from Related TechTarget Sites

Security
Cloud Security
Consumerization
SMB Security
Security AU
Security IN
Computer Weekly

Security
- Using network flow analysis to improve network security visibility
  
  To overcome network security issues from advanced attackers and BYOD, security professionals are turning to network flow analysis to gain improved network security visibility.
- Sourcefire updates malware detection, malware analysis capabilities
  
  New features for detecting and analyzing malware in Sourcefire's FireAMP and FirePOWER products supplement flagging signature-based antimalware.
- Information Sharing and Analysis Centers: Getting started with ISACs
  
  Joe Granneman explains how ISACs enable cybersecurity information sharing and the basic requirements for joining an ISAC.
Cloud Security
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
- How to use PCI SSC supplement to achieve PCI compliance in the cloud
  
  Ed Moyle examines highlights of the recently released PCI SSC information supplement that offers new details on achieving PCI compliance in the cloud.
- Cloud API security risks: How to assess cloud service provider APIs
  
  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.
Consumerization
- What's new with the BB10 OS, BES 10 and more
  
  If you're wondering what all of BlackBerry's new products do, such as the BB10 OS, Hub, Balance and BES 10, this FAQ should clear things up.
- How limited mobile device support can help IT handle consumerization
  
  To deal with consumerization, some companies limit mobile device support to specific devices because it makes management and app development easier.
- BlackBerry, VMware deliver dual persona features for mobile devices
  
  BlackBerry's Secure Work Space for iOS and Android will help heavily regulated companies or those searching for extra security to better support BYOD.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- A CIO's five-point plan for managing endpoint security
  
  Niel Nickolaisen offers a five-point solution for managing endpoint security for the hyper-connected enterprise -- starting with data governance.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
Computer Weekly
- Departments handed manual for digital services redesign
  
  Government releases a manual for CTOs redesigning Whitehall digital services, as contracts with system integrators begin to expire from 2014
- EC-funded datacentre efficiency project CoolEmAll releases first prototypes
  
  The European Commission funded project CoolEmAll has released the first prototypes of tools designed to make datacentres more efficient
- Dell appoints new UK head to drive services transformation
  
  As the company attempts to reinvent itself, Dell has a new UK head, Tim Griffin who aims to deliver a single country focus

All Rights Reserved,Copyright 2008 - 2013, TechTarget