CSOONLINE.com - Compliance http://www.csoonline.com/ en_us (c) Copyright 2009 CXO Media, Inc. All Rights Reserved. Sun, 08 Nov 2009 10:48:03 GMT 2009-11-08T10:48:03Z en_us (c) Copyright 2009 CXO Media, Inc. All Rights Reserved. Analyst: PCI Security a Devil, 'Like No Child Left Behind' http://www.csoonline.com/article/506635/Analyst_PCI_Security_a_Devil_Like_No_Child_Left_Behind_?source=rss_compliance Joshua Corman, research director for enterprise security at The 451 Group, says the private sector's obsession with PCI DSS compliance is blinding it to larger threats. Wed, 04 Nov 2009 05:00:00 GMT Bill Brenner http://www.csoonline.com/article/506635/Analyst_PCI_Security_a_Devil_Like_No_Child_Left_Behind_?source=rss_compliance 2009-11-04T05:00:00Z Delayed Again: Red Flags Rule Deadline Now June 1, 2010 http://www.csoonline.com/article/506459/Delayed_Again_Red_Flags_Rule_Deadline_Now_June_1_2010?source=rss_compliance Bowing to Congressional pressure, the FTC is delaying enforcement of the Red Flags Rule until June 1, 2010, for financial institutions and creditors. Here, IT security pros weigh in on what the rule means for them. Mon, 02 Nov 2009 05:00:00 GMT Bill Brenner http://www.csoonline.com/article/506459/Delayed_Again_Red_Flags_Rule_Deadline_Now_June_1_2010?source=rss_compliance 2009-11-02T05:00:00Z IT Security Outsourcing in Decline; Companies Do More In-house http://www.csoonline.com/article/505872/IT_Security_Outsourcing_in_Decline_Companies_Do_More_In_house?source=rss_compliance Seventh Annual Global Information Security Survey: Companies that once outsourced many IT security controls have opted to do more in-house. A look at what caused the shift. (Third in a four-part series) Wed, 28 Oct 2009 04:00:00 GMT Bill Brenner http://www.csoonline.com/article/505872/IT_Security_Outsourcing_in_Decline_Companies_Do_More_In_house?source=rss_compliance 2009-10-28T04:00:00Z Companies Seek Social Networking's promise, Find Peril Instead http://www.csoonline.com/article/505863/Companies_Seek_Social_Networking_s_promise_Find_Peril_Instead?source=rss_compliance Seventh Annual Global Information Security Survey: Social networking sites such as Twitter, Facebook and LinkedIn enhance collaboration but also make it easier than ever for your employees to share customer data and company secrets with outsiders (First of a four-part series). Mon, 26 Oct 2009 04:00:00 GMT Bill Brenner http://www.csoonline.com/article/505863/Companies_Seek_Social_Networking_s_promise_Find_Peril_Instead?source=rss_compliance 2009-10-26T04:00:00Z Making Sense of Rapid7's Metasploit Acquisition http://www.csoonline.com/article/505574/Making_Sense_of_Rapid7_s_Metasploit_Acquisition?source=rss_compliance The information security community stands to benefit from Rapid7's acquisition of Metasploit, IT security experts say. But much depends on how Rapid7 handles its new property. Wed, 21 Oct 2009 04:00:00 GMT Bill Brenner http://www.csoonline.com/article/505574/Making_Sense_of_Rapid7_s_Metasploit_Acquisition?source=rss_compliance 2009-10-21T04:00:00Z The Seven Deadly Sins of Security Policy http://www.csoonline.com/article/504314/The_Seven_Deadly_Sins_of_Security_Policy?source=rss_compliance Are your security policies really managing your organization's risks? Or are they just 'check-the-box' rules? We detail common policy mistakes security pros often make. Tue, 06 Oct 2009 04:00:00 GMT Joan Goodchild http://www.csoonline.com/article/504314/The_Seven_Deadly_Sins_of_Security_Policy?source=rss_compliance 2009-10-06T04:00:00Z 7 Ways Security Pros DON'T Practice What They Preach http://www.csoonline.com/article/502914/7_Ways_Security_Pros_DON_T_Practice_What_They_Preach?source=rss_compliance IT security pros spend oodles of time trying to hammer best practices into the heads of fellow employees. But in an informal poll conducted by CSOonline, many admitted they don't always follow their own advice. Tue, 22 Sep 2009 04:00:00 GMT Bill Brenner http://www.csoonline.com/article/502914/7_Ways_Security_Pros_DON_T_Practice_What_They_Preach?source=rss_compliance 2009-09-22T04:00:00Z Data Mapping: How to Make It Work http://www.csoonline.com/article/499439/Data_Mapping_How_to_Make_It_Work?source=rss_compliance A data map can make e-discovery and regulatory compliance a lot simpler, but the difficulties of getting there are well-known. Bruce Phillips offers tips from Fidelity National Financial's data mapping project. Tue, 11 Aug 2009 04:00:00 GMT Joan Goodchild http://www.csoonline.com/article/499439/Data_Mapping_How_to_Make_It_Work?source=rss_compliance 2009-08-11T04:00:00Z Report: Business Risk of Fraud, Corruption Up Amid Economic Crisis http://www.csoonline.com/article/496288/Report_Business_Risk_of_Fraud_Corruption_Up_Amid_Economic_Crisis?source=rss_compliance Control Risks' report suggests businesses heighten efforts to guard against fraud and comply with stringent regulations. Tue, 30 Jun 2009 04:00:00 GMT Joan Goodchild http://www.csoonline.com/article/496288/Report_Business_Risk_of_Fraud_Corruption_Up_Amid_Economic_Crisis?source=rss_compliance 2009-06-30T04:00:00Z Cybersecurity Crossroads: Will White House Czar Choose the Right Path? http://www.csoonline.com/article/493565/Cybersecurity_Crossroads_Will_White_House_Czar_Choose_the_Right_Path_?source=rss_compliance President Obama is set to name a new cybersecurity czar with unprecedented access to the Oval Office. The move will please some security pros, but frustrate others who think government is already in too deep. Thu, 28 May 2009 04:00:00 GMT Bill Brenner http://www.csoonline.com/article/493565/Cybersecurity_Crossroads_Will_White_House_Czar_Choose_the_Right_Path_?source=rss_compliance 2009-05-28T04:00:00Z DHS, Drug Interdiction and Common Sense http://www.csoonline.com/article/487963/DHS_Drug_Interdiction_and_Common_Sense?source=rss_compliance Fighting drug cartels requires that all agencies get on the same page. Jim Giermanski says Memorada of Understanding are producing the opposite effect. Fri, 03 Apr 2009 04:00:00 GMT http://www.csoonline.com/article/487963/DHS_Drug_Interdiction_and_Common_Sense?source=rss_compliance 2009-04-03T04:00:00Z Federalizing Cybersecurity: Necessary or Nitwitted? http://www.csoonline.com/article/487745/Federalizing_Cybersecurity_Necessary_or_Nitwitted_?source=rss_compliance A cybersecurity bill may be filed in the U.S. Senate expanding government enforcement to the private sector. Security practitioners say more oversight of critical infrastructure wouldn't hurt. But anything more than that probably would. Wed, 01 Apr 2009 04:00:00 GMT Bill Brenner http://www.csoonline.com/article/487745/Federalizing_Cybersecurity_Necessary_or_Nitwitted_?source=rss_compliance 2009-04-01T04:00:00Z Sample Internet Usage Policy - Manufacturing Company http://www.csoonline.com/article/486676/Sample_Internet_Usage_Policy_Manufacturing_Company?source=rss_compliance The Internet usage policy of a mid-sized manufacturing company with less than 50 employees. Wed, 01 Apr 2009 04:00:00 GMT http://www.csoonline.com/article/486676/Sample_Internet_Usage_Policy_Manufacturing_Company?source=rss_compliance 2009-04-01T04:00:00Z Sample Fire Alarm Evacuation Policy - University http://www.csoonline.com/article/486677/Sample_Fire_Alarm_Evacuation_Policy_University?source=rss_compliance Fire Alarm Evacuation policy of a large state university with approximately 26,000 students and more than 13,000 employees. Wed, 01 Apr 2009 04:00:00 GMT http://www.csoonline.com/article/486677/Sample_Fire_Alarm_Evacuation_Policy_University?source=rss_compliance 2009-04-01T04:00:00Z Fleury: Shoring Up Internal Defenses http://www.csoonline.com/article/486149/Fleury_Shoring_Up_Internal_Defenses?source=rss_compliance CSO Compass Award winner Lynda Fleury, CISO with insurance company Unum, thinks companies should look inward to strengthen information security's weakest link. Tue, 24 Mar 2009 04:00:00 GMT Joan Goodchild http://www.csoonline.com/article/486149/Fleury_Shoring_Up_Internal_Defenses?source=rss_compliance 2009-03-24T04:00:00Z