Effective strategies for risk management and security information management systems

Home
Information Security magazine
Effective strategies for risk management and security information management systems

Premium Content

Access "Effective strategies for risk management and security information management systems"

Issue Overview

Information Security magazine - June 2009

This month's issue of Information Security Magazine covers a breadth of topics. The cover story this month is about SIM and how it can boost compliance, visibility, and overall business intelligence. Other featured articles cover risk management, convergence, and even the security concerns that come with cloud computing. Read on to learn more. Access >>>

Access TechTarget
Premium Content for Free.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Already a member? Login to access this content.

What's Inside

Features

- How to write a risk methodology that blends business, security needs
  One security professional describes a homegrown risk methodology currently being used by a large university and a private corporation.
- Lack of cloud computing definition adds confusion, risk
  Vendors loosely using the term cloud computing are causing confusion for users in the market for buying and securing these services.
- Risk management must include physical-logical security convergence
  If your organization is serious about managing risk and total asset protection, then physical-logical convergence is a necessary step.
- Mature SIMs do more than log aggregation and correlation
  They've come a long way from the early days of log aggregation and correlation; enterprises now glean value from SIMs for compliance, visualization, and even overall business intelligence.

Columns
- Three cloud computing risks to consider
  Cloud computing carries risks that enterprises need to weigh before they forge ahead.
- New partnerships, creative thinking help security bust recession
  The economy is forcing organizations to be more resourceful and bury the hatchet. And that's a good thing.

More Premium Content Accessible For Free

Compliance and risk modeling

E-Zine

You can fight compliance or embrace it, but one way or the other, you can’t escape it. Increasingly, smart organizations are not just accepting ...
Essentials: Threat detection

E-Zine

Antivirus and intrusion prevention aren’t the threat detection stalwarts they used to be. With mobile endpoints and new attack dynamics, enterprises ...
Managing identities in hybrid worlds

E-Zine

The world in which successful IAM programs must be implemented is increasingly complex, a mix of legacy on-premise IAM infrastructures, cloud-based ...

Back to top

More from Related TechTarget Sites

Cloud Security
Consumerization
Financial Security
SMB Security
Security AU
Security IN
Computer Weekly

Cloud Security
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
- How to use PCI SSC supplement to achieve PCI compliance in the cloud
  
  Ed Moyle examines highlights of the recently released PCI SSC information supplement that offers new details on achieving PCI compliance in the cloud.
- Cloud API security risks: How to assess cloud service provider APIs
  
  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.
Consumerization
- What's new with the BB10 OS, BES 10 and more
  
  If you're wondering what all of BlackBerry's new products do, such as the BB10 OS, Hub, Balance and BES 10, this FAQ should clear things up.
- How limited mobile device support can help IT handle consumerization
  
  To deal with consumerization, some companies limit mobile device support to specific devices because it makes management and app development easier.
- BlackBerry, VMware deliver dual persona features for mobile devices
  
  BlackBerry's Secure Work Space for iOS and Android will help heavily regulated companies or those searching for extra security to better support BYOD.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- A CIO's five-point plan for managing endpoint security
  
  Niel Nickolaisen offers a five-point solution for managing endpoint security for the hyper-connected enterprise -- starting with data governance.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
Computer Weekly
- Departments handed manual for digital services redesign
  
  Government releases a manual for CTOs redesigning Whitehall digital services, as contracts with system integrators begin to expire from 2014
- EC-funded datacentre efficiency project CoolEmAll releases first prototypes
  
  The European Commission funded project CoolEmAll has released the first prototypes of tools designed to make datacentres more efficient
- Dell appoints new UK head to drive services transformation
  
  As the company attempts to reinvent itself, Dell has a new UK head, Tim Griffin who aims to deliver a single country focus

All Rights Reserved,Copyright 2000 - 2013, TechTarget