The in-depth guide to data destruction
A critical part of securing intellectual property is the timely elimination of records and data you no longer need. Here's the scoop on overwriting, degaussing and physical destruction of media.
IT Audit
IT audit news, analysis, best practices and how-tos
IT Audit articles
Nation's nuclear power watchdog comes up short on FISMA compliance
Majority of compliance gaps surround configuration and vulnerability management, an independent audit finds. But NRC has made important strides, too.
Small company, big security challenges
Startup Linkable Networks decided to meet PCI DSS Level 1 security requirements, with cloud-based infrastructure as an extra wrinkle. Here's a look inside the effort.
Cisco CSO on self-defending networks: The marketing's dead, the goal's alive
Cisco security chief John Stewart on the future of the 'self-defending network' and why IT security shops must return to basics
Forget new threats: It's the old-school attacks that keep getting you
Pen tester Rob Havelt has found that the most egregious security lapses have nothing to do with the latest, most-hyped threats.
Healthcare security needs a booster shot
Healthcare organizations are swiftly embracing electronic records and social media, but their investments in information security and privacy are lagging.
Mac OS X Lion: Losing its security pride
Spate of vulnerabilities and Trojan attacks has some wondering about the state of Apple Mac security.
SIEM: Dead or alive?
Security practitioners defend the value of SIEM after elQnetworks declares the technology dead.
Senator to businesses: Protect data or pay
Senator Richard Blumenthal says his data breach legislation will deter data breaches. IT security experts have their doubts.
Data breach risks: Not just the insider threat
Data flows with business partners need as much attention, if not more. Here are key questions and considerations to get you started.
MORE GREAT IT AUDIT RESOURCES
An IT audit verifies the presence and effectiveness of controls to protect data integrity and security. Need even more depth on getting the most from information technology audits? Here are links to books, websites, associations and other information resources to help understand the state of the art.
IT Auditing Using Controls to Protect Information Assets, 2nd Edition
by Chris Davis and Mike Schiller (2011). On Amazon.com.
Enterprise Governance of Information Technology: Achieving Strategic Alignment and Value
by Wim Van Grembergen (2010). On Amazon.com.
Governance, Risk Management, and Compliance (Grc): High-impact Strategies - What You Need to Know: Definitions, Adoptions, Impact, Benefits, Maturity, Vendors
by Kevin Roebuck (2011). On Amazon.com.
ISACA, the Information Systems Audit and Control Association
Also see IT audit certifications in CSOonline's Security Certification Directory.
