Pinpointing the Terror Risk
The driving force behind the Customs-Trade Partnership Against Terrorism (C-TPAT) is the idea that it is possible for private companies to risk-manage for a onetime terrorist event.
Consumer Protection
One former FTC member weighs in on the need for a national disclosure law and FTC penalties for companies that fail to protect consumer information
The 404 on Sarbox
Section 404 of the Sarbanes-Oxley Act (Sox) requires companies to establish controls that provide reasonable protection against preventable events that could influence a company's value.
Peering Into Your Supply Chain
The government wants you to share data about what's inside shipping containers. Right now, the C-TPAT program is voluntary. With all the attention to port security, it won't stay that way.
Who's Who in Cambridge
Harvard and MIT have similar identity management challenges but very different solutions. Comparing the two is a good exercise for any CSO looking at ID management.
Value Protection Cheat Sheet
An information security event is a time-bound negative deviation of business process performance from normal operational state resulting from an information security control failure.
Value Made Visible
How American Water's Bruce Larson uses a simple metric to build bridges with business partners and justify security spending at the same time
Interview: Dr. Park Dietz, Forensic Psychiatrist
Dr. Park Dietz, a forensic psychiatrist, spoke with ManagingEditor Michael Goldberg about effective violence prevention programs and how to let problem employees go gracefully
The Search for Tools to Make Mines Safer
After four mining accidents in January and early February killed 16 people in West Virginia and one in Kentucky, experts are studying whether technology can help prevent fatalities
Crop Detective
John Brown may not be able to find a needle in a haystack. But using satellite imagery, he can tell you if hay was ever growing on the farm.
Editors Are Standing By
But our greatest effort goes into keeping our collective finger on the pulse of the security profession
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.


