Definition of Enterprise Security
Enterprise security is the process of securing a corporations' infrastructure and information.
|
|
Enterprise Security
|
|
Integrating Security into the Corporate Culture
This short paper analyzes why organizations should consider spending more time on developing a culture that is both aware and capable of responding to security-related risk and goes on to suggest ways in which this could be achieved. At a major security conference several years ago, I asked a group of security professionals to define risk in such a way that it could be understood by non-specialists and then to suggest different ways of reacting to risks once they had been identified. Interestingly enough, many of those present were able to come up with good examples of risks, but defining risk in practical terms as a concept turned out to be a difficult exercise, even for security professionals.
Read the Article
|
Keeping Data Private and Knowing It
So your databases contain sensitive data, and privacy safeguards are in place. But is someone looking at the data anyway? Could a password have gotten into the wrong hands? Or could an authorized user be accessing sensitive data from a remote location after hours? What if someone in the IT organization were to use a privileged username to read sensitive data? Would you know?
Read the Article
|
Risks and Rewards of Instant Messaging in the Banking Sector
Instant Messaging (IM) was the first IP based mass communication application rolled out by users, rather than management, who saw immediate business value in this new form of communication. However IM opens up a variety of risks, especially in the Banking and Securities sector of the market and poses some serious legal and regulatory challenges. This paper seeks to explain these risks and to recommend current best practice for addressing them.
Read the Article
|
Essential Trends and Dynamics of the Endpoint Security Industry
This paper examines trends and dynamics of the endpoint security industry, and shows how business strategies of market leaders such as Symantec exemplify these factors. When exploring current developments in the information security marketplace, we stipulate that this sector is beginning to converge with the general IT software industry in response to factors such as the evolution of the industry structure, competitive dynamics, regulatory compliance efforts, and the maturing state of security products.
Read the Article
|
The Threat of Lifestyle Computing in the Enterprise
At first glance, this blurring between personal IT and corporate data may not seem like an issue, but the lack of control over devices and data poses a significant risk to businesses that are ultimately accountable for their intellectual property in terms of manageability, security and confidentiality.
Read the Article
|
Regaining Control over your Mobile Users
In this paper, I will discuss the industry's recommendation for a secure environment for mobile users. Some areas of concern that I will cover will include software standardization, security policies, and security awareness training. I will briefly discuss two vendor's products that can help administrators gain control of their mobile systems and reduce the risk of malware on their network.
Read the Article
|
Threats to Enterprise Security
With attacks becoming more aggressive, faster, and multi-pronged, there is growing emphasis on consistent assessments, preventative measures, and security information management. No longer will an attack entail a single virus often well-thought out assaults are being implemented. Simultaneously, organizations are exposing more systems that are effectively dissolving the boundaries between what have been considered internal and external threats. In addition, the need for IT groups to find new ways to do more with less are discovering ways to reuse legacy mainframe infrastructure. This recycling has, in turn, exposed more IT resources such as mainframes that until recently have been considered very secure to the same challenges faced by distributed systems.
Read the Article
|
Case Study in Information Security: Securing The Enterprise
This practical is a case study of an Insurance Company's migration to an enterprise-wide security system. It is the intent of this practical to provide a path to follow when creating or migrating to a security system. Initially, a primitive online security system was the only mechanism to control access to corporate data. The exposures were severe - there were no integrity controls outside of the online environment. Anyone with basic programming skills could add, change and/or delete production data.
Read the Article
|
|
|
Page: 1 2 3 4 5 6 7 8 9 10 11
Members currently browsing this category:
|
|
