Government/Vertical Industries
(45)
Risk Management: Bridging Policies and Procedures - Fundamental Security Concepts
[ Source: Global Knowledge ]
October 2008-One thing that security professionals know is that security is about processes, not about the technology. The key to security is to match the technology to the process, but you have to know the process first. Policies and procedures are the requirements, and risk management is the bridge between the two. Collectively, they are the road maps that lead to effective and efficient security designs. This white paper covers the basics of risk management in ....
Protecting Against the New Wave of Malware
[ Source: Sunbelt Software ]
September 2008-Managing threats to the endpoint infrastructure is becoming increasingly difficult for most organizations regardless of their size. Viruses, worms, spyware and other forms of malware are becoming more virulent, their authors are becoming more adept at getting around existing defenses, and the profits generated by malware are funding new and more dangerous threats.
At the same time, many anti-virus, anti-spyware and other anti-malware defenses are not keeping up with the growing threats ....
Trends in Information Security: A CompTIA Analysis of IT Security and the Workforce
[ Source: CompTIA ]
September 2008-As global trends of workforce mobility and decentralization put a greater strain on IT security infrastructure, it is becoming increasingly more complex for corporate IT departments to safeguard information. More than ever before, firms are using diverse devices to exchange information faster and over longer distances, and the growing use of technologies supporting this trend - such as handheld devices or voice over IP – gives rise to new risks. As a result, corporate IT ....
Fast-Start Failover Best Practices: Oracle Data Guard 10g Release 2
[ Source: Oracle ]
January 2008-Fast-Start Failover is an Oracle Data Guard 10g Release 2 feature that mechanically and reliably fails over to an elected, synchronized standby database in the event of loss of the manufacture database, without requiring manual intervention to execute the failover. In addition, following a fast-start failover, the original production database is automatically reconfigured as a new standby database upon reconnection to the configuration. This white paper explains Fast-Start Failover and describes Maximum Availability Architecture (MAA) ....
Vulnerability Management for Dummies
[ Source: Qualys ]
May 2008-As a business owner, or someone responsible for network security within your organization, you need to understand how to prevent attacks and eliminate network weaknesses that leave your business exposed and at risk.
"Vulnerability Management for Dummies" arms you with the facts and shows you how to implement a successful Vulnerability Management program. Whether your network consists of just a handful of computers or thousands of servers distributed around the world, this book ....
ThinkVantage Security Strategy and Client Security Solution 6.0
[ Source: IBM ]
January 2008-This paper published by IBM describes ThinkVantage security strategy and the roll that Client Security Solution 6.0 plays in that strategy. The ThinkVantage security strategy is to provide a complementary set of security features as value add to ThinkPad notebooks and ThinkCentre desktops. The purpose of this set of security features is to enable customers to implement a layered defense security model on PCs.
The Effectiveness of Security Policies
[ Source: IronPort Systems ]
November 2008-This set of findings from a security study on data leakage revealed that many companies do not have security policies and that security policies that are in place are often ineffective. This analysis provides additional justification for the initial survey findings, which reported that employees around the world are putting corporate and personal data at risk.
The survey included more than 2000 employees and information technology professionals in 10 countries that Cisco selected because ....
Data Backup and Compliance: Three Reasons to Get It Right
[ Source: Remote Backup Systems ]
January 2008-Fortune 500 companies have been vilified for reckless data stewardship and fabrication of financial reports. Corporate America, already under varying degrees of competitive and performance pressure, is now faced with compliance legislation and disclosure requirements that seek to right some of wrongs done to consumers, investors, and employees alike. Access and process controls, internal and third party audits, reporting requirements and penalties for non-compliance are just a few of the areas that will be addressed ....
NAC 2.0: A New Model For a More Secure Future
[ Source: Sophos ]
September 2008-As organizations turn to network access control (NAC) technologies to protect their networks and data, the flaws of earlier versions of NAC are becoming apparent. New pressures from a constantly changing threat environment and an increasingly mobile workforce require a new NAC model that will offer more finely controlled network access, an increased agility of response, and a better focus on network, desktop, and security operations. This paper looks at where NAC 1.0 went wrong ....
The Case for Security Information and Event Management (SIEM) in Proactive Network Defense
[ Source: TriGeo Network Security ]
January 2008-It’s widely accepted that Security Information and Event Management (SIEM) systems are excellent tools for regulatory compliance, log management and analysis, trouble-shooting and forensic analysis. What’s surprising to many is that this technology can play a significant role in actively defending networks. This whitepaper explains precisely how real-time analysis, combined with in-memory correlation, and automated notification and remediation capabilities can provide unprecedented network visibility, security and control.
Security Information Management in the Payment Card Industry
[ Source: TriGeo Network Security ]
September 2008-
Simply deploying a security solution cannot guarantee meeting every Payment Card Industry (PCI) requirement in full. This whitepaper discusses the challenges of PCI compliance and how security information and event management (SIEM) provides the data visibility, log management, end-point security and active response needed to demonstrate and meet each of the 12 PCI compliance requirements.
Introduction to Digital Rights Management - DRM
[ Source: LockLizard ]
August 2007-
This paper covers the technology called Digital Rights Management or DRM, what it achieves and how this benefits your business. It covers the demand for DRM in the protection of intellectual property and the use of encryption and cryptography in protecting and controlling digital content. It compares DRM controls against IT controls, charging mechanisms, and the use of DRM in various industries. Most importantly it covers how DRM can be made to work for your ....
The Case for Security Information and Event Management (SIEM) in Proactive Network Defense
[ Source: TriGeo Network Security ]
January 2008-
It’s widely accepted that Security Information and Event Management (SIEM) systems are excellent tools for regulatory compliance, log management and analysis, trouble-shooting and forensic analysis. What’s surprising to many is that this technology can play a significant role in actively defending networks. This whitepaper explains precisely how real-time analysis, combined with in-memory correlation, and automated notification and remediation capabilities can provide unprecedented network visibility, security and control.
National Security Community Cloud Computing
[ Source: Dataline LLC ]
October 2008-
Today’s military, intelligence community and homeland security organizations are being pressured by rapid information technology developments. The increased importance and use of open source information, advances in Internet–based services and solutions, the rapid adoption and deployment of advanced information tools and the advent of multi-terabyte data streams and data sources all play a role in increasing the challenge. Many organizations are also looking forward to establishing globally networked and integrated information technology enterprises. The goal ....
The Case for Security Information and Event Management (SIEM) in Proactive Network Defense
[ Source: TriGeo Network Security ]
January 2008-
It’s widely accepted that Security Information and Event Management (SIEM) systems are excellent tools for regulatory compliance, log management and analysis, trouble-shooting and forensic analysis. What’s surprising to many is that this technology can play a significant role in actively defending networks. This whitepaper explains precisely how real-time analysis, combined with in-memory correlation, and automated notification and remediation capabilities can provide unprecedented network visibility, security and control.
Security Information Management in the Payment Card Industry
[ Source: TriGeo Network Security ]
September 2008-
Simply deploying a security solution cannot guarantee meeting every Payment Card Industry (PCI) requirement in full. This whitepaper discusses the challenges of PCI compliance and how security information and event management (SIEM) provides the data visibility, log management, end-point security and active response needed to demonstrate and meet each of the 12 PCI compliance requirements.
Introduction to Digital Rights Management - DRM
[ Source: LockLizard ]
August 2007-
This paper covers the technology called Digital Rights Management or DRM, what it achieves and how this benefits your business. It covers the demand for DRM in the protection of intellectual property and the use of encryption and cryptography in protecting and controlling digital content. It compares DRM controls against IT controls, charging mechanisms, and the use of DRM in various industries. Most importantly it covers how DRM can be made to work for your ....
Real RFID Risks
[ Source: TechWeb TV ]
June 2008-
RFID researcher Adam Laurie discusses vulnerabilities in RFID technology and what makes RFID-based passports insecure.
DoD Cybercrime Head Outlines Threats, Preparedness
[ Source: TechWeb TV ]
June 2008-
Jim Christy, director of futures exploration for the U.S. Department of Defense, talks about threats, preparedness, and his role in the newest "Die Hard" movie
Cyberwarfare Defined
[ Source: TechWeb TV ]
June 2008-
Researcher Gadi Evron explains cyberwarfare and what we learned from the attack on Estonia.
Why Buy Pre-Owned? 2008 UsedCisco.com Buyer's Guide
[ Source: UsedCisco.com ]
May 2008-
Have you found yourself asking...
- What is pre-owned network hardware?
- How much money can I really save?
- Where does pre-owned hardware come from?
- How do I select an appropriate vendor?
- What service & support options are available?
- How do I avoid buying counterfeit hardware?
- How does buying pre-owned help save the environment?
An incredible array of organizations from ....
Serving The Aging Citizen
[ Source: Deloitte Touche Tohmatsu ]
January 2008-
This paper published by Deloitte Touche Tohmatsu explains the challenges faced by state governments to serve the aging population. That population in the developed world is aging, and some countries face declining populations. These changes will lead to in an increasing problem of old-age dependency and, in many countries, a wide gap between government expenditure and revenue. Three factors - openness to immigration, higher fertility rates, and increases in average retirement ages - will somewhat ....
Social Security And Retirement Reform
[ Source: Republic of South Africa ]
January 2008-
This paper published by Republic of South Africa discussion sets out the main proposals for a broad-based contributory social security system and improvements to the South African retirement fund industry. The provision of income security is amongst the most practical expressions of a nations cohesion and values. It relies on confidence in the long-term continuity of institutions. It embodies the core principles of solidarity and risk-sharing. These reforms are aimed at directly attacking poverty by ....