COMPLIANCE COUNSELOR
Standards-based compliance: A how-to guide
Dick Mackey
10.26.2005
Rating: -3.25- (out of 5)
|
Dick Mackey, Principal, SystemExperts Corp., presented this session at Information Security Decisions Fall 2005.
Regulations such as SOX 404, GLBA and HIPAA are notorious for telling you what you need to accomplish, but not how to accomplish it. This session dives into the pros and cons of using standards such as COBIT, COSO and ISO17799 as the vehicles to improve regulatory compliance. Each of these standards has a different purpose, some extremely broad, others more focused. In thinking about security, in particular, one needs to navigate through the various standards to understand which parts overlap and how to meet the security requirements specified in them without wasting time and money. This session shows you how. We detail how the standards relate to specific regulations, the motivation behind each security framework, and their strengths and weaknesses. We also discuss how awareness of these standards can help improve your overall security approach, as well as your risk management program.
You find out:
Which standard is best aligned to which regulation
How security standards in general help you improve your risk management processes
The most useful parts of each standard
If you can safely ignore any parts of each framework
Download this presentation
To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchSecurity.com.
Register now
to start rating these tips. Log in if you are already a member.
|
|
|
BROWSE BY TAG
Compliance Counselor,
COBIT,
Security Audit, Compliance and Standards,
ISO 17799,
Sarbanes-Oxley Act,
HIPAA,
Gramm-Leach-Bliley Act (GLBA),
Standards,
Compliance, VIEW ALL TAGS
|
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
