STRATEGIC PLANNING/ERM Articles
Data Breach Fallout: Do CISOs Need Legal Protection?
Since the security executive is on the hot seat after a data breach, some industry experts suggest CISOs get themselves some form of liability protection. The downside is that such protection could shield those who deserve the blame for an incident.
Former ISACA Head: SAS 70 Changes Coming
Marios Damianides, a partner in Ernst & Young's technology and security risk services group and past president of ISACA's board of directors, expects changes for SAS 70 and more collaboration between security and non-security management groups.
Protecting Joe's Office
Joe's got a billion-dollar secret. How can he keep it safe from thieves, turncoats and spies? A picture's worth a thousand words...
FUD Watch | Black Hat and the Hype Machine
Next month the hacking community will descend upon Las Vegas for the Black Hat and Defcon events. But are these events anything more than theater?
Industry View: Web Application Security Today - Are We All Insane?
WhiteHat Security's Jeremiah Grossman believes the current approach to Web application security is the very picture of insanity
Information Security Management: The Basics
Good information security management will successfully embed security program principles into the DNA of your organization
Cost-Cutting Through Green IT Security: Real or Myth?
Some say the concept of green IT security is a stretch, but others see a real opportunity to cut costs as well as carbon emissions. (Part two in a series: How to Manage Security in a Recession)
Making Security Work When Staffing is Tight
When you can't afford new hires, there are plenty of ways to give the people you have better security scruples. (Part One in a series: How to Manage Security in a Recession)
DOJ Staffer Tapped to Head US-CERT
The Department of Homeland Security has named Mischel Kwon as head of US-CERT.
Sourcefire Says No To Barracuda's Takeover Bid
Sourcefire has rejected a $186 million unsolicited takeover offer from Barracuda Networks.
