Winning strategies for integrating security information management and identity access management

Home
Information Security magazine
Winning strategies for integrating security information management and identity access management

Premium Content

Access "Winning strategies for integrating security information management and identity access management"

Issue Overview

Information Security magazine - March 2010

This month’s cover story, “Linking ‘Who’ and ‘What’”, explains the new trend of joining SIM and IAM strategies to tie system vulnerabilities and policy violations to the user activity that causes them. Other articles in this month’s issue cover topics such as security management, vulnerability assessment, compliance, and more. Access >>>

Access TechTarget
Premium Content for Free.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Already a member? Login to access this content.

What's Inside

Features

- HITECH Act increases HIPAA security requirements
  HIPAA security compliance has been a mixed bag but HITECH ups the ante
- Creating meaningful information security metrics by Andrew Jaquith, Forrester Research, Inc.
  Learn how to develop an effective information security metrics program and pitfalls to avoid.
- Joining security information management systems with identity management systems boosts security by Randall Gamby, Contributor
  Integrating security information management systems with identity management systems ties policy violations and vulnerabilities to user activity
- Knowledge-based authentication poses privacy issues
  Knowledge-based authentication helps catch fraud, but the authentication technology poses customer privacy issues.

Columns
- Is HITECH Act a game changer?
  The HITECH Act increases penalties for a lack of HIPAA security compliance but will it really improve health care security?
- Develop an effective information security career plan by Lee Kushner and Mike Murray
  A successful career in information security requires an effective information security career plan
- Relying on basic network intrusion detection systems isn't enough
  Organizations must enhance network intrusion detection systems with supporting processes to uncover genuine threats

More Premium Content Accessible For Free

The rapid evolution of MDM solutions

E-Zine

Mobile device management (MDM) continues to grow at a feverish pace, both in terms of adoption and mobile security features. BYOD policies, and the ...
Enterprise network security visibility: Beyond traditional defenses

E-Handbook

Organizations have implemented various network security technologies to gain better visibility into their networks. However, these security ...
Compliance and risk modeling

E-Zine

You can fight compliance or embrace it, but one way or the other, you can’t escape it. Increasingly, smart organizations are not just accepting ...

Back to top

More from Related TechTarget Sites

Cloud Security
Consumerization
Financial Security
SMB Security
Security AU
Security IN
Computer Weekly

Cloud Security
- Three practices to prevent cloud vendor lock-in
  
  Expert Ed Moyle offers three tips for preventing cloud lock-in long after contract negotiations are complete.
- Gartner: Negotiate cloud contracts with detailed security, control
  
  When negotiating with cloud providers, enterprises must demand cloud contracts with specific security and control provisions, Gartner analysts say.
- Cloud data breach notification: Defining legal obligations
  
  Francoise Gilbert provides a cloud data breach notification overview for enterprises concerned about placing personal information in the cloud.
Consumerization
- How to choose the right enterprise mobile, cloud and social tools
  
  IT departments need to evaluate vendors for social tools, such as mobile and cloud. Without a secure plan, IT risks an unsecure liability.
- Office Mobile for iPhone requires Office 365
  
  Microsoft released Office Mobile for iPhone but it requires an Office 365 subscription and isn't made for iPad.
- NSA surveillance leads to tighter data privacy policies
  
  Knowledge of the National Security Agency's surveillance has led some companies to revamp their data privacy policies.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- Security tech market set to grow 8.7% in 2013, says Gartner
  
  The worldwide security technology and services market will reach $67.2bn in 2013, up 8.7% from 2012, according to research firm Gartner
- A malicious charger could hack Apple devices easily, claim researchers
  
  A modified phone charger or battery could be used to hack Apple devices, say researchers from Georgia Tech
- How to reduce IT security risk with IT asset management
  
  IT asset management expert Barb Rembiesa explains how ITAM best practices like IT asset standardization and rationalization reduce IT security risk.
Computer Weekly
- Users want reduced cloud complexity and more interoperability, study finds
  
  Cloud adoption has risen in 2013 but to yield its true benefits, cloud complexity must be reduced and interoperability increased, shows study
- HR technology booming as businesses turn to the cloud
  
  Over the next 18 months, 60% of companies plan to roll out HR technology solutions, says analyst group Bersin by Deloitte.
- Looking to the cloud for the future of datacentres
  
  By 2020, the role of the datacentre – and perhaps even the IT leader who used to be responsible for it – will be very different

All Rights Reserved,Copyright 2000 - 2013, TechTarget