enforcement
Using Skybox Solutions to Achieve NERC Compliance: Achieve Efficient and Effective NERC Compliance by Automating Many Required Controls and Processes
White Paper The North American Electric Reliability Corporation (NERC) provides compliance and enforcement programs for bulk power system owners, operators and users. These programs are driven by standards that focus on the security... [13 Nov 2009]
Protecting SharePoint Data Long Term
White Paper Planning for data migration to Enterprise Content Management (ECM) systems like SharePoint needs to incorporate data use monitoring and least privilege access enforcement as part of a SharePoint security policy. [13 Nov 2009]
Cell Phone Threat Mitigation Tactics: Practical Considerations From the Frontline
White Paper By discussing the necessary components of a comprehensive cell phone policy enforcement plan, this paper details the immediate actions security managers should take to formulate a cell phone threat mitigation strategy... [13 Nov 2009]
Confronting Risk in Business Relationships and Emerging Markets: Enhanced Due Diligence and Corporate Intelligence
White Paper Moreover, the dramatic increase in U.S.and international regulatory enforcement actions has added to the challenge that executives face in their global business operations. The reputational and business risks associated... [13 Nov 2009]
Wireless Devices in Call Centers - Data Theft and Standards/Legal Compliance Risks
White Paper In addition to discussing relevant standards and laws and accompanying risks of noncompliance, the paper discusses the benefits of a comprehensive no cellular phone and wireless enforcement plan in call centers - in... [13 Nov 2009]
How to Get NAC Up-and-Running in One Hour: For Check Point Firewall or Endpoint Security Administrators
White Paper The firewall will be the gateway enforcement point for policy-based NAC. NAC can provide an organization with powerful, granular control of endpoint network access. Port-based NAC deployment is challenging, but gateway... [13 Nov 2009]
The Presumption of Good Faith: Defending Your eRecords Retention Policies With Active Enforcement
White Paper The purging and preservation of ESI is a technical process that requires a technical solution, especially if a company hopes to establish such capabilities on a global, integrated and routine basis. Enterprise computer collection and... [12 Nov 2009]
Web Filtering: Completing the Evolution From Acceptable-Use to Serious Malware Defense
White Paper Web-filtering solutions provide acceptable-use policy enforcement and malware protection. Given the rapidly increasing number of attacks originating from the Web, such solutions are ever more important. [12 Nov 2009]
Consistency Verification of Stateful Firewalls Is Not Harder Than the Stateless Case
White Paper Firewalls play an important role in the enforcement of access control policies in contemporary networks. However, firewalls are effective only if they are configured correctly such that their access control rules are... [12 Nov 2009]
Network Security & Compliance: How They Drive Quality of Care
White Paper In it, it reviews new laws, enhanced HIPAA mandates, increased enforcement activities, and new security guidelines from the Department of Health and Human Services (HHS). This paper examines events that are driving the... [12 Nov 2009]
Wireless Devices on Trading Floors - Regulatory Compliance Risks
White Paper In addition to outlining relevant regulations and accompanying risks of non-compliance, the paper discusses the benefits of a comprehensive no cellular phone and wireless enforcement plan on the trading floor - in terms... [12 Nov 2009]
Security for the Cloud Infrastructure: Trusted Virtual Data Center Implementation
White Paper In this paper, the author extends previous work on the TVDc by implementing controlled access to networked storage based on security labels and by implementing management prototypes that demonstrate the enforcement of... [12 Nov 2009]
Simplifying Operational Security: Securing Configuration Automation for IT Audit Readiness
White Paper This paper offers insight into challenges customers face today regarding the development of a uniform set of system security configuration standards, often referred to as a "Security configuration baseline," in addition to the... [12 Nov 2009]
£500,000 fine coming for businesses that lose data?
News Under the ICO's current powers, the strongest sanction the watchdog has against organisations that lose data is to serve it with an enforcement notice requiring it to improve data security or face legal action. [12 Nov 2009]
Using SilentRunner in Compliance With EU Privacy Laws
White Paper The EU has passed directives outlining the guidelines that law enforcement, governments and corporations must follow regarding what can and cannot be done. As technology has advanced to include the capabilities to... [11 Nov 2009]