Compliance
As 2011 draws to a close, I’ve decided to take a step back and review the past year. Let’s take the lessons learned about...
Hi, what are you looking for?
SecurityWeek
Compliance
(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of...
Artificial Intelligence
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and...
Compliance
Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.
Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Compliance
New Service Matches Data from WHOIS domain registries, IP geo-location to Other Sources to Identify Non-compliant Organizations.Software intelligence solutions provider V.i. Labs has launched...
Compliance
In October 2010, Version 2.0 of the Payment Card Industry – Data Security Standard (affectionately called PCI-DSS) was released by the Security Standards Council...
Compliance
“There’s an app for that” has become a mantra of the modern day smartphone carrier. Most businesses are deploying mobile apps as a convenient...
Compliance
EMC today announced the availability of EMC SourceOne eDiscovery – Kazeon 4.6, the company’s eDiscovery solution that helps corporations, legal service providers, law firms...
Compliance
What Can we Learn From Some of the Significant Hacks in 2011?As we round the corner to the last quarter of 2011 and move...
Compliance
Tru.ly, a provider of Internet-based age verification services, today released an age verification API that lets developers integrate age verification into apps and authenticate...
Compliance
- Getting The Most From Your SIEM Solution -A typical SIEM deployment conversation may look something like this: Vendor: Ms Customer, now that you’ve...
Compliance
Real Security goes Beyond Compliance, and Integrates with Validation and Security Processes.
Compliance
We’re not talking about plain old rules, but rather mandated rules as defined in a federally enacted legislation. As someone with a career in...
Compliance
TRICARE Breach Potentially Puts 4.9 Million Individuals at RiskA massive data breach that could potentially affect 4.9 million individuals who received services from TRICARE, a...
Audits
Avoiding Compliance, Audit and Operational Risks. Are you Gambling a Successful Audit on Key Management Processes that Fail to Measure up?
Compliance
Despite the risk of steep fines and increased transaction fees, many businesses are still failing to maintain compliance with the Payment Card Industry Data...
Compliance
Most breaches are not the result of hackers, but rather reflect the increase in the risks of the knowledgeable insider related to identity theft...
Compliance
Half of the Software Piracy Discovered is Being Committed by Existing Customers Who are Out of Compliance with their Licenses. How Can We Fix...
Compliance
Managing ever-growing volumes of data and being prepared for eDiscovery requests challenges many organizations. Email is no longer the primary source of records companies...
Compliance
Co3 Systems, a Cambridge, Massachusetts based startup, made its official debut as a company this week, and also launched its first offering—a SaaS-based data...
Application Security
If Patch Tuesday is a party, this would be the IT security version of pre-gaming.On Aug. 9, Microsoft accidentally released information on the five...
Compliance
Tips and Strategies for Getting Started With PCI DSS 2.0 Compliance
Compliance
In my previous column, I outlined how software vendors can best identify if they have a piracy problem. Once software piracy is identified it...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)