CSOONLINE.com - In Depth

BC/DR Challenges in a Hurricane Zone

Joan Goodchild — Mon, 01 Dec 2008 05:00:00 GMT

Some business continuity demands are universal, but others vary depending on where you are. In the first part in an ongoing series, we take a look at what's at stake and what's in place for two companies faced with the worsening threats posed by hurricane zones.

Forrester: Why (and How) Security Must Drive Business Resiliency

Sun, 23 Nov 2008 05:00:00 GMT

Four reasons and eight practical steps for building a better business resiliency program.

International Challenges in PCI Security

Bill Brenner — Mon, 17 Nov 2008 05:00:00 GMT

Bruce Larson, CSO at American Water, and others discuss the challenges of maintaining PCI DSS compliance when the company has a global reach. (Third in a series)

Security Predictions: What Happens Next?

Mon, 10 Nov 2008 05:00:00 GMT

An ongoing index of predictions, projections and prognostication for 2009 and beyond. Marcus Ranum, Rich Mogull, Jeff Spivey, Whit Diffie, Richard Hollinger and many more.

Moving Money: Loomis Arms For Safety

Fri, 07 Nov 2008 05:00:00 GMT

Armored car company Loomis is banking on wireless IT applications to help safeguard the money it carries. (A case study from CIO.com.)

Social Engineering: Eight Common Tactics

Joan Goodchild — Thu, 06 Nov 2008 05:00:00 GMT

Stealing your company's 'hold' music, spoofing caller ID, pumping up penny stocks - social engineers blend old and new methods to grab passwords or profits. Being aware of their tricks is the first line of defense.

Security at the Point of Sale

Michael Fitzgerald — Mon, 03 Nov 2008 05:00:00 GMT

Cash, cards, inventory and customer data intersect at the point of sale. Here's how to keep your defenses up to date.

Hedge Your Bets: The Importance of IT Risk Management in M&A

Thu, 30 Oct 2008 04:00:00 GMT

Two experts break down critical considerations in merger and acquisition activity

The Security Metrics Collection

Mon, 27 Oct 2008 04:00:00 GMT

Numbers are the language of business. Fortunately, security metrics are growing ever more sophisticated. Knowing what to measure, how to measure it and how to communicate those metrics can help improve security's efficiency, effectiveness and standing in the business world.

A Tale of Two PCI Security Audits

Bill Brenner — Mon, 27 Oct 2008 04:00:00 GMT

Robert Duran of Time Inc. and Allan Kintigh of National Card Services share their PCI auditing experiences. Why one's experience was unpleasant and the other fared better.

Third-Party Anonymous Proxies? No! No! No!

Bill Brenner — Tue, 21 Oct 2008 04:00:00 GMT

Two security pros explain why they'd never use an anonymous proxy service from a Web-based third party. Part three in a series.

The Security Case Study Collection

Fri, 17 Oct 2008 04:00:00 GMT

Got depth? Selected case studies on security challenges from CSO. Fraud, incident response, departmental organization and leadership issues, metrics and much more.

Anonymous Proxy Servers: Necessary Or Evil?

Bill Brenner — Tue, 14 Oct 2008 04:00:00 GMT

Some security experts believe anonymous proxy servers are only necessary if you're up to no good, while others see them as a legitimate tool for research, pen testing and the like. Who's right?

PCI Application Security: Who's Guarding the Data Bank?

Fri, 10 Oct 2008 04:00:00 GMT

Ben Rothke and David Mundhenk offer compliance strategies for PCI's new application security requirements.

Why Security Pros Hate Microsoft SharePoint (and What to Do About It)

Bill Brenner — Tue, 07 Oct 2008 04:00:00 GMT

Microsoft's SharePoint collaboration platform is all the rage in today's business world, especially since third parties gained the ability to plug security holes. But managing it can still be a nightmare for IT security shops.