COMPLIANCE Articles
3 Reasons Why Employees Don't Follow Security Rules
A recent survey finds employees continue to ignore security policies. (Surprise, surprise.) Here's a reminder about what often is missing in organizations that tempts workers to walk the wrong side of security law.
Judge Orders Palin to Preserve Yahoo E-mails
Messages that concern state business from hacked account must be saved, Alaska judge rules.
PCI Application Security: Who's Guarding the Data Bank?
Ben Rothke and David Mundhenk offer compliance strategies for PCI's new application security requirements.
New DOJ Rules on Corporate Prosecution: What Do They Mean For CSOs?
The DOJ has recently revised its guidelines for prosecuting business organizations to assist prosecutors in deciding under what circumstances to bring corporate charges. Will these new changes make life easier for CSOs? Or does it mean even more vigilance when it comes to areas like records protection and retention?
IT Security: Can We Be Compliant and Yet Insecure?
Bill Sieglein on how to go beyond regulatory checklists.
Providence Health CSO on Recovering From HIPAA Violations
Eric Cowperthwaite, CSO of Seattle-based Providence Health & Services, opens up about the organization's efforts to bounce back from HIPAA violations.
Telecommuting Poses Security, Privacy Risks
A new study finds that allowing employees to work from home and telecommute poses security and privacy risks that are not being addressed adequately by business or government.
State Breach Disclosure Laws - Update
Five states (and D.C.) have put data breach disclosure laws in the books in recent months. Article includes links to full text of each law.
Former ISACA Head: SAS 70 Changes Coming
Marios Damianides, a partner in Ernst & Young's technology and security risk services group and past president of ISACA's board of directors, expects changes for SAS 70 and more collaboration between security and non-security management groups.
Digital Forensics Software: The Usual Suspects
The four key players in digital forensics software: Guidance, AccessData, Paraben and Technology Pathways
