March 10, 2010Security and risk management
The security and risk management topics page provides IT management with up-to-date information and resources on IT asset management, data security and privacy, IT security management, disaster recovery and risk management.
Sub-Topics
Compliance doesn't begin and end with the Sarbanes-Oxley Act (SOX). Company must also keep up with the various security standards, the Health Insurance Portability and Accountability Act (HIPAA) and numerous other regulations and guidelines. It's a tall order, but it's one company must face in order to protect their customers and stay in line with standards set by the IT industry as well as the government.
Managers and CIOs face regular data security and privacy issues as they are expected to effectively use technology to share data while still following specific rules and regulations to protect personal information.
Health Insurance Portability and Accountability Act (HIPAA) protects health insurance coverage for workers and their families when they change or lose their jobs.
Information security describes activities that relate to the protection of information and information infrastructure assets against the risks of loss, misuse, disclosure or damage. Information security management is controls that the organizations need to implement to ensure that it is sensibly managing these risks.
IT asset management is the set of business practices that join financial, contractual and inventory functions to support life cycle management and strategic decision making for the IT environment. Assets include all elements of software and hardware that are found in the business environment.
IT auditing is the process of collecting and evaluating evidence of an organization’s information systems, practices, and operations. The evaluation of obtained evidence determines if the information systems are safeguarding assets, maintaining data integrity, and operating effectively and efficiently to achieve the organization's goals or objectives.
Information technology law is a set of recent legal enactments, currently in existence in several countries, which governs the process and dissemination of information digitally. These legal enactments cover a broad gambit of different aspects relating to computer software, protection of computer software, access and control of digital information, privacy, security, internet access and usage, and electronic commerce.
The Sarbanes-Oxley (SOX) Act was signed into a US federal law on 30 July 2002. The Act is designed to oversee the financial reporting landscape for finance professionals. Its purpose is to review legislative audit requirements and to protect investors by improving the accuracy and reliability of corporate disclosures. The act covers issues such as establishing a public company accounting oversight board, auditor independence, corporate responsibility and enhanced financial disclosure.
List Topic Article
Highlights
Ideal for small businesses and midmarket enterprises, respectively, the new appliances provide comprehensive network, application and data security in one easy to manage appliance.
VeriSign's Trust Seal is said to drive consumer preference by distinguishing trusted from untrusted sites. Now lesser-known businesses with websites that do not require SSL Certificates will be able to increase confidence, traffic and transactions by simply displaying the Trust Seal.
Today’s businesses face multiple challenges, including the need to innovate in extremely competitive business climates, address highly dynamic regulatory and compliance challenges, speed ROI to counter shrinking IT budgets, and secure themselves against a wide barrage of new and evolving sophisticated threats.
Attacks based on vulnerabilities in websites are skyrocketing, and not many solutions are available to protect organizations against them. How do you deal with this and other key security issues today?
Two months into the New Year and we’re already starting to see a number of our 2010 cyber security predictions come true. At the start of the new decade, cybercriminals continue to be relentless in their pursuit of new and sophisticated attacks against consumers and enterprises.
