Page 299 - White Papers in Governance & Risk Management

Filling the Compliance Gap in Your Microsoft Environment

Is your Microsoft environment compliant? In his new Quest white paper "Filling the Compliance Gap in Your Microsoft Environment," Windows Security expert Randy Franklin Smith examines the importance of compliance in today's business world. Learn how you can ensure your data will be trusted in a court of law and...

Implementing Detailed User-Level Auditing of UNIX and Linux Systems

Detailed user-level auditing for your UNIX and Linux environment is essential to achieving business-critical goals like regulatory compliance (e.g., GLBA, SOX, PCI, etc.), protection against insider attacks, and the ability to troubleshoot and diagnose system availability issues. Centrify's auditing, access control...

Securing the Beast: Protecting the Extended Financial Enterprise - from Mainframes to Mobile Devices

Today, financial services IT organizations need to secure more than just the people, systems and infrastructure that sit inside their buildings. IT organizations must secure a variety of mobile user groups like executives, brokers, agents, consultants, and contractors. Additionally, with the growth of online account...

Compliance Multi-Tasking - Today

Driven by increasing regulatory scrutiny and the need to protect key corporate assets such as intellectual property, compliance and issues surrounding data leakage have risen to the top of the list of priorities for today's financial institutions. Federal US legislation such as GLBA, as well as state laws such as...

Data Leakage: Four Sources of Abuse

While governments and industry watchdog groups are mandating security measures over privacy, healthcare and financial data, enterprises have their own business priorities and concerns that are equally vital to their ongoing success. Companies are complex entities that create, modify, store, and move vast amounts of...

Pathway to PCI Compliance

Companies are scrambling to meet the Payment Card Industry (PCI) Data Security Standard (DSS). Financial institutions and merchants alike have to be in compliance - or face financial penalties and loss of processing privileges. This is new ground for many organizations, introducing a whole new set of technologies and...

GLBA Case Study - Vulnerability Management

Gramm-Leach-Bliley Act (GLBA) regulations require organizations to protect themselves against unauthorized access, anticipated hazards and risks threatening the security or integrity of consumer financial information. GLBA has introduced a great deal more rigor in how banks and credit unions have to handle, manage and...

Data Activity Auditing for SOX: An Auditor

As the Sarbanes Oxley (SOX) compliance challenge continues for financial services organizations, automated data auditing has become a priority. But how can you design data auditing systems and processes if you’re not sure what auditors are looking? Or what controls you need in place to satisfy requirements or how to...

Combating the Insider Threat

The growing awareness of the insider threat, and the recognition that security breaches by internal, trusted users are at least as risky as malicious outsiders, is pushing organizations to take action. Fueled by regulatory requirements, the market for various security solutions that can help detect and mitigate risks...

Protecting Customers Beyond Compliance Deadlines

Learn how you can protect your entire online user base without compromising the bottom line. So your financial institution has met the compliance guidance to provide stronger authentication for customer data and transactions. Now what? That is only the tip of the iceberg in deploying a long-term security...

Guide to GLBA Risk Management Compliance

This guide focuses on GLBA's digital security requirements as it pertains to network security audits and vulnerability management. GLBA's security regulations are in place to assure the confidentiality and privacy of financial information electronically collected, maintained, used, or transmitted – especially when...

VeriSign Identity Protection for FFIEC Compliance

Learn how to protect your consumers' digital identities. Comply with FFIEC guidelines. Manage your reputational risk. Solidify your approach to consumer authentication. Learn more about VeriSign(r) Identity Protection Services. Get the white paper from VeriSign now!

Securing Your Apache Web Server With a thawte Digital Certificate

In this guide you will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. We will also touch on the role of...

Guidelines for Media Sanitization

Information systems capture, process, and store information using a wide variety of media. This information is located not only on the intended storage media but also on devices used to create, process, or transmit this information. This media may require special disposition in order to mitigate the risk of...

Your Customers and Their Secrets

This paper discusses and analyzes the internet-based, password reset functionality provided by many organizations for their customers. The average application user is being forced to remember more and more complex passwords to accomplish their daily routines. The very nature of complex passwords, sometimes results in...