5 myths about awareness
Lance Spitzner of SANS Securing the Human program outlines five common misconceptions about security awareness programs
Compliance
Strategies, tips and best practices for encouraging and enforcing compliance with security rules and regulations
Compliance articles
The security laws, regulations and guidelines directory
Need to find and understand security and privacy laws, regulations and guidelines? Here's a handy compendium with summaries plus links to the full text of each law.
Let someone break the rules to improve security
Michael Santarcangelo explains why allowing a little non-compliance among staff can actually lead to increased levels of compliance later
Former Zynga CSO: Innovate or Die
Cloud Security Alliance co-founder and former Zynga CSO Nils Puhlmann reflects on what he's learned and explains why he thinks the industry needs more pioneers
Pulling it all together: A special report on GRC
An in-depth look at what GRC can do, and what it should do, to help manage risk
Rick Kelly: Value focus
Now CSO at Ingersoll Rand, Kelly builds security on a foundation of business value (CSO Compass Awards 2012)
Feds set to require cloud vendor security certification
Starting June 6, FedRAMP demands pan-agency security verification before cloud providers can work with the government
Report: PHI security is MIA
According to "Breach Report 2011: Protected Health Information" by the IT security firm Redspin, 19 million patient health records were breached last year, a 97-percent increase from 2010.
Is your definition of security holding you back?
Without a clear definition of security that is consistent through out your team, how can you expect the people in your organization to comply? Michael Santarcangelo explains
How the Red Cross found its ID management groove
Red Cross CISO Suzanne Hall on the organization's monster effort to overhaul security and identity management.
