 |
||||
|
|
|||
|
||||
Here's a sneak peek at our June issue: In this issue of Information Security magazine, expert Diana Kelley takes an in-depth look at security information management systems (SIMs) and their evolution from log-aggregation tools to centralized correlation and management tools that aid with business intelligence, compliance, threat management and identity management.
Learn how companies are leveraging SIMs to increase efficiency and cost savings in their security programs, and are exploring how the comprehensive view of network and user activity that is collected and parsed by the SIM can be used for proactive risk management.
In another article this month, University of Washington director of information security operations Cris V. Ewell explains the step-by-step development of a homegrown risk methodology currently being used by UW as well as a large corporation. The methodology not only reduces residual risk, but helps organizations meet compliance and business needs.
Also, editor Michael S. Mimoso looks at how enterprises are converging their physical and logical security operations. Convergence affords organizations the opportunity to align security with overall business goals, streamline business processes such as provisioning and investigations, and centralize security operations and policies under one office. There are challenges, namely political and human barriers that threaten any convergence effort.
TABLE OF CONTENTS
Features
SIMs: More Than a Pile of Logs
They've come a long way from the early days of log aggregation and correlation; enterprises now glean value from SIMs for compliance, visualization, and even overall business intelligence.
A Sustainable Relationship
If your organization is serious about managing risk and total asset protection, then physical-logical convergence is a necessary step.
A Method[ology] to the Madness
One security professional describes a homegrown risk methodology currently being used by a large university and a private corporation.
Cloud Confusion
Vendors are loosely using the term cloud computing, and it's causing confusion for users in the market for buying and securing these services.
Columns
Perspecitves: Tread Carefully into the Cloud
Cloud computing carries risks that enterprises need to weigh before they forge ahead.
A Little Ingenuity
The economy is forcing organizations to be more resourceful and bury the hatchet. And that's a good thing.
This was first published in June 2009