IT AUDIT Articles
4 Ways to Get the Most from Your PCI QSAs
In response to Heartland CEO Robert Carr's claim that his qualified security assessors (QSAs) missed key weaknesses during a PCI security audit of his company, security experts offer tips to get the most from an assessment.
One Man's View: Heartland CEO Must Accept Responsibility
Security Incite's Mike Rothman read our interview with Heartland's CEO and didn't like it one bit. Here's why.
PCI, QSAs, Hackers, and Slackers: Will the Real Enemy Please Stand Up?
CSO Senior Editor Bill Brenner dives into a contentious debate over the Heartland CEO's tirade against QSAs and searches for reason. Will he find it?
Mass 201 CMR 17: A Survival Guide for the Anxious
Security experts offer tips for navigating Mass 201 CMR 17. Will your business be ready?
Sue the Auditor and Shut Down the Firm
Rothke and Mundhenk: "We are all in favor of throwing incompetent auditors to the dogs. Conversely, any organization that refuses to remediate security gap findings should be given an injunction"
Top 10 Reasons the Firewall Guy's Hair is on Fire
The firewall is a mature technology, right? Then why do those who manage it feel like they're running a daycare overrun with little savages?
PCI Security Pain: Amid Recession, Merchants Struggle to Comply
With the recession drying up compliance budgets, merchants send PCI Security Standards Council General Manager Bob Russo a letter asking for help (includes audio).
Social Engineering: The Fine Art of BS, Face to Face (Includes Video)
A confrontation with a facilities manager demonstrates social engineers' complete comfort dealing with (and manipulating) conflict
Information Systems Audit: The Basics
What should you expect from an IS audit? Jennifer Bayuk spells out the audit process, step by step.
Where PCI DSS Still Falls Short (and How to Make it Better)
Former CISO and Symantec strategic consulting director Ariel Silverstone goes through PCI DSS line by line and offers suggestions to make it more effective
