Page 17 - White Papers in Governance & Risk Management

Enterprise Mobility: How to Protect Corporate Data

Every company will have a different path to mobile adoption, and final implementations will vary, depending on the needs of various business functions and on regulations that impact mobile policies. A simple way to evaluate where a business is and where it wants to be is to look at devices in terms of who owns them,...

Information Security Risk and the Need for Quantitative Ratings

Credit rating models transformed the way we do business and have existed for almost a century. Now, these same models are inspiring a new way of managing vendor security risk by using externally collected security data to assess and quantify security performance. Download this white paper to learn: The...

The Importance of Managing Privileged Accounts

Organizations can substantially benefit by having a process in place for the use and management of administrative privileges. Read this white paper for tips on: Developing and enforcing policies for privileged accounts; Minimizing the use of shared administrative accounts; Verifying the privileges...

Controlling and Managing Superuser Access

Effectively managing privileged accounts has become critical as security and compliance emerge as the driving forces behind most IT initiatives. Unfortunately, native tools and manual practices for privileged account management are inadequate for today's complex heterogeneous enterprise. Explore this white paper...

BYOD File Sharing - Go Private Cloud to Mitigate Data Risks

The consumerization of IT and the popularity of BYOD (Bring Your Own Device) are jeopardizing the security and integrity of business data. Seeking an easy way to share files across smartphones, tablets, and desktops, employees are signing up for free public cloud file sharing services that lack rigorous security and...

Enterprise Mobility Management: A Data Security Checklist

Secure file sharing, syncing and associated productivity requirements impose pressing technical and operational challenges on organizations. Data must be secure. File sharing must adhere to company policies and industry regulations. At the same time, employees need fast, convenient access to content to be...

What Did You Do in School Today Junior? An Analysis of Application Usage On K-12 School Networks

Schools are embracing the use of technology to cut costs, to perform research, roll out computer-based classes and exercises and to compete for students. At the same time, the school administration is being asked by parents, state, local, regional or even federal governments to make sure that students and faculty are...

Managing Unknown Risks to Medical Devices, Patients and Their Data

In this resource, Dr. Alan Snell, former CMIO, and Jeffrey Short, a healthcare attorney, share insights on medical device risks that are easily missed, and easily catastrophic, with repercussions ranging from HIPAA violations to patient harm. More importantly, they offer guidance on what healthcare leaders can...

Implementing an Employee Monitoring Program

Security and risk professionals recognize the value and benefits of implementing an employee-monitoring program. Privacy advocates and legal and human resources professionals see potentially unwarranted invasion of employee privacy as reasons not to monitor, or at least to restrict monitoring to instances where enough...

Top Reasons to Hire Certified Healthcare Security and Privacy Pros

As the evolving healthcare industry faces increasing challenges to keep personal health information protected - including growing volumes of electronic health records, new government regulations, and a more complex IT security landscape - there is a growing need to ensure knowledgeable and credentialed security and...

Implementing an Employee Monitoring Program

Security & Risk professionals recognize the value and benefits of implementing an employee-monitoring program. Privacy advocates and Legal and Human Resources professionals see potentially unwarranted invasion of employee privacy as reasons not to monitor, or at least to restrict monitoring to instances where...

Zero Day Protection for Operation High Roller: Financial Fraud Prevention

A recent research report describes a so-called new financial fraud scheme dubbed "Operation High Roller". Although there is nothing in this report that was not previously covered in Trusteer's publications (Blog and white paper), the report received substantial press coverage and raised the awareness of the risks...

Responding to Insider Fraud: Insights on New Study of Internal Risks

Many organizations realize they are at risk of insider attacks. But do they have evidence and capabilities to respond to these risks? That's the real challenge, says researcher Larry Ponemon. "The Risk of Insider Fraud" is the name of new research conducted by Ponemon and Attachmate Luminet, and it sheds new light...

Achieving Compliance in Digital Investigations

As regulation and litigation increase, internal investigators must support an alphabet soup of compliance obligations: SOX, GLBA, FISMA, HIPAA, PCI DSS, regional privacy laws, and more. Although each regulation is different, reflecting specific risks and markets, these laws share common investigation requirements in...

How 3 Cyber Threats Transform the Role of Incident Response

While we still use many of the same old names - viruses, Trojans, and worms - today's malware deserves much more respect than many are giving it. Where traditional viruses mostly aimed to disrupt operations or win fame for their coders' cleverness, today's malware enables potent multistage attacks called advanced...