Items Tagged with "Compliance"


9259e8d30306ac2ef4c5dd1936e67634

ISO 27001 - BS 25999-2 Certification Process

December 01, 2010 Added by:Dejan Kosutic

This free 45-minute webinar training session is designed for organizations that plan to get certified against ISO 27001 or BS 25999-2 for the first time. This session will explain the process of certification as well as how to make the certification successful...

Comments  (0)

Ebb72d4bfba370aecb29bc7519c9dac2

Random Highlights From PCI DSS 2.0

December 01, 2010 Added by:Anton Chuvakin

Use of a PA-DSS compliant application by itself does not make an entity PCI DSS compliant, since that application must be implemented into a PCI DSS compliant environment and according to the PA-DSS Implementation Guide – this is useful for... ahem... reminding merchants about it...

Comments  (1)

6d117b57d55f63febe392e40a478011f

WikiLeak's Next Dump May Alter Enterprise Security Forever

November 30, 2010 Added by:Anthony M. Freed

If the recent classified data disclosures by whistleblower organization WikiLeaks can be said to have governments in a scramble, then it would be fair to say that the pending release of confidential records from private enterprises should have executives and shareholders in a serious pucker...

Comments  (6)

59d9b46aa00c70238bb89056cfeb96c0

How To Risk-Base Supply Chain Vendors Under FCPA

November 25, 2010 Added by:Thomas Fox

The Supply Chain probably does not command your Compliance Department attention as do other types of third party business partners. This may be coming to an end as most Compliance Professionals recognize that third parties which supply goods or services to a company should be scrutinized...

Comments  (1)

9259e8d30306ac2ef4c5dd1936e67634

BS 25999-2 Implementation Checklist

November 23, 2010 Added by:Dejan Kosutic

Your management has given you the task to implement business continuity, but you're not really sure how to do it. Although it is not an easy task, you can use the BS 25999-2 methodology to make your life easier - here are the main steps necessary to implement this standard...

Comments  (0)

Fc152e73692bc3c934d248f639d9e963

Who Is Responsible In A Breach?

November 19, 2010 Added by:PCI Guru

Unfortunately, the card brands have not helped the situation. The card brands approach to breaches boarders on childlike. In their view, it is everyone’s fault – the organization that was breached, the QSA, anyone except, of course, the card brands...

Comments  (0)

A7290c5bd7bc2aaa7ea2b6c957ef639b

The Future of Privacy, Cooperation and Enforcement

November 19, 2010 Added by:David Navetta

Some regulators and academics call for stronger privacy protections, arguing that consumers are still unaware of the consequences of disclosing personal data. Notably, opinions on the state and future of privacy did not necessarily split along the industry and regulator lines...

Comments  (0)

9259e8d30306ac2ef4c5dd1936e67634

ISO 27001 Implementation: Make It Easier Using ISO 9001

November 15, 2010 Added by:Dejan Kosutic

This free 45-minute training is designed for organizations that plan to implement ISO 27001 and have already implemented ISO 9001. The session will explain how to use ISO 9001 to facilitate the implementation of ISO 27001 through the existing documentation and processes. Register here...

Comments  (0)

Fc152e73692bc3c934d248f639d9e963

SAS 70 Is Dead!

November 15, 2010 Added by:PCI Guru

The good news is that, for the most part, SSAE 16 and ISAE 3402 are essentially the same. There are a few differences that are important to financial auditors and lawyers, but should not have an impact on people relying on these reports for PCI compliance or other purposes...

Comments  (3)

59d9b46aa00c70238bb89056cfeb96c0

DOJ Guidance on FCPA Compliance Programs

November 12, 2010 Added by:Thomas Fox

The information included these collective Corporate Compliance Programs provides the FCPA compliance practitioner with the most current components that the Department of Justice believes should be included in a FCPA compliance program...

Comments  (0)

959779642e6e758563e80b5d83150a9f

Top Five Mistakes CIOs Often Make

November 10, 2010 Added by:Danny Lieberman

As long as the earth doesn’t move, you’re safe - but once things start, you can drop into a big hole. Most security vulnerabilities reside in the cracks of systems and organizational integration and during an M&A, those fault lines can turn security potholes into the Grand Canyon...

Comments  (4)

6429389c5e8a4c9555be876f8484331a

Understanding and Selecting a Database Assessment Solution

November 09, 2010 Added by:Sasha Nunke

Database Assessment is not just a security precaution, but an integral part of database operations management. Databases form the backbone of every major application within the data center, which makes their stability and security both critically important to business operations...

Comments  (0)

0dc5fdbc98f80f9aaf2b43b8bc795ea8

So You’ve Been Hacked  — Now What?

November 09, 2010 Added by:Global Knowledge

A security breach may require you to notify people outside the company, particularly if the incident affects your compliance with PCI, GLBA, or HIPAA. If you want to pursue criminal charges or recover damages, you should contact your local law enforcement’s cybercrime unit or national law enforcement...

Comments  (0)

59d9b46aa00c70238bb89056cfeb96c0

Proposed Amendments to the FCPA

November 05, 2010 Added by:Thomas Fox

After his speech to the Compliance Week Annual Conference last May, Assistant Attorney General for the Criminal Division of the US Department of Justice, Lanny Breuer, took several questions from the audience. One of his more interesting responses was regarding facilitation...

Comments  (0)

9259e8d30306ac2ef4c5dd1936e67634

Business Continuity Implementation Webinar

November 01, 2010 Added by:Dejan Kosutic

This free one-hour training is designed for organizations that plan to implement BS 25999-2. This session will explain all the steps in business continuity implementation according to BS 25999-2 standard, and provide tips on how to proceed with this complex task...

Comments  (0)

9259e8d30306ac2ef4c5dd1936e67634

ISO 27001 Annex A Controls

October 27, 2010 Added by:Dejan Kosutic

Annex A is where ISO 27001 and ISO 27002 come together - the controls in ISO 27002 are named the same as in Annex A of ISO 27001, the difference is the level of detail - ISO 27001 gives only a short definition, while ISO 27002 gives details on how to implement the control...

Comments  (1)

Page « < 29 - 30 - 31 - 32 - 33 > »