Page 97 - White Papers in Governance - bank information security

Security Management and Operations Report

The prevalent approach to security management and operations is to implement on an ad hoc and technology-focused basis. This haphazard approach is no longer adequate. This report details: The current state of the market and what to expect moving forward; Research implications for technology vendors; Research...

Best Practices for Secure Software Development

As part of the software development process, security professionals must make choices about where to invest their budget and staff resources to ensure that homegrown applications are as secure as possible. This research brief details: Best practices for all organizations that would like to produce more secure...

Stop Malware, Hackers and More - IT Disaster First Aid Kit

You've found a virus running on your server. You discover login IDs on your network that don't belong. A hacker has your credit card database. Any one of these is enough for you to hit your panic button and lose it. Don't. In this eBook, learn: Tips on how to handle various emergency scenarios; The necessary...

Patch Management 101: How to Prevent High-Risk Security Breaches

Managing and administering software updates remains one of the most challenging, tedious and resource-intensive tasks an IT Department undertakes on a daily basis. The constantly evolving software landscape makes patch management an important consideration for all IT decision makers, regardless of the organization...

Rethinking your Enterprise Security

The fact is that the world is constantly evolving and always connected - and your enterprise must be too. Forward-thinking enterprises realize that they need to focus on a sustainable approach to security and risk management - one that is designed to address the new wave of vulnerabilities that prevail due to...

DDoS: Evolving Threats, Solutions

DDoS attacks on banks are becoming more rampant, advanced and persistent. Attackers are continuing to work around the clock in developing and sharpening their toolset and methodologies used to perform these attacks. Most attacks have been brute-force against multiple institutions; others have been subtle, probing...

Beyond the Checkbox: A Sustainable Approach to Access Certification

Every large enterprise needs to grant some level of access to its employees, contractors, partners, vendors, and customers. While necessary to support the business, access to critical information resources also represents a source of potential business and compliance risk. A clear definition of who is responsible for...

Scanning Databases for Credit Card Information

Today's enterprise consists of numerous applications and a large number of them handle credit card data. As a result of standard processing, it is often the case that credit card data gets stored within file systems and databases in clear text - which poses a huge security risk. It is vital that all occurrences of...

Accomplishing Access Governance in a Secure, Cost-Effective Manner

Enterprise access governance is a fundamental business challenge facing every organization today. Enabling user access to enterprise information resources, while also managing access-related business risk is a key objective for information security teams. Increasingly, information security professionals recognize that...

Navigate the Future of the Security Department

Is your status among C-level colleagues slipping? Are your budgetary pitches falling flat? If you've answered "yes" to either of these questions, Forrester Research, Inc.'s February 2012 report, Navigate the Future of the Security Organization can help you: Stop reacting to a never-ending series of threats du...

2013 Annual Cost of Failed Trust Report: Threats & Attacks

For the first time, Ponemon Institute has quantified the staggering costs of failures in cryptographic key and digital certificate management. The First Annual Cost of Failed Trust Report, underwritten by Venafi, reveals findings such as: Hundreds of millions lost due to failure to control trust; Serious...

Security Configuration Management: Moving from Praise to Results

A whole host of industry recognized sources, including Gartner, Securosis and SANS have been consistently recommending security configuration management (SCM) as one of the top, if not the top, security controls you can implement to protect your IT infrastructure and data. Surprisingly, even though most organizations...

SCM: Getting Back to IT Security Basics

In IT security, obvious weaknesses like weak configurations often get overlooked. Yet for hackers, they're an open door into networks and systems. Learn how security configuration management (SCM), a critical security control, hardens configurations to prevent breaches, and immediately detects and corrects any...

SANS Secure Configuration Management Demystified

Security experts and analysts agree that a systematic, enterprise-wide program of secure configuration management is one of the most beneficial security solutions you can implement. It provides an objective, concise measure of your overall security posture. But it continues to be recognized as one of the "hardest...

Business-Driven Identity and Access Management: A Buyer's Guide

Identity and Access Management projects are among the most visible IT initiatives that enterprises undertake, since they involve so much interaction with line of business users. Despite their high-profile nature, many organizations unfortunately continue to struggle with their IAM programs, which can add to...