Category Archives: Security Management
PbD, Privacy by Design concept
http://privacybydesign.ca is the main place for Privacy by Design concept. “Privacy by Design (PbD) represents a significant shift from traditional approaches to protecting privacy, which focus on setting out minimum standards for information management practices and providing remedies for privacy … Continue reading
Trend and Risk Reports, by IBM X-Force
IBM X-Force is regularly publishing Trend and Risk Report. According to their own definition: The IBM X-Force Trend and Risk Report is produced twice per year: once at mid-year and once at year-end. This report provides statistical information about all … Continue reading
True Cost of Compliance, by Ponemon & Tripwire
Ponemon Institute has created a report, commissioned by Tripwire, about the cost of compliance. This is good material to look for any security manager. Ponemon Institute and Tripwire Inc. conducted The True Cost of Compliance research to determine the full … Continue reading
McAfee’s Risk and Compliance Outlook Report
Report produced by McAfee is interesting reading for having a view on risk and compliance challenges within companies. McAfee retained Evalueserve to conduct an independent assessment of the factors organizations that use risk and compliance products face in 2012. This … Continue reading
Verizon’s Payment Card Industry Compliance Report
Verizon’s Payment Card Industry Compliance Report 2011 is available. It is good material to look if one wishes to have a view on PCI status. This report analyzes findings from actual Payment Card Industry (PCI) Data Security Standard (DSS) assessments … Continue reading
Internet Security Threat Report, by Symantec
Internet Security Threat Report is available from Symantec’s Threat Landscape page. Direct link to the report seems to be this. Information sources: Symantec Global Intelligence Network Vulnerability database Symantec Probe Network Antifraud community The figure below is an extract from … Continue reading
Cybersecurity, recommendations for governments by DIGITALEUROPE, JEITA and ITI
Cybersecurity is clearly an issue for national security. 3 organizations have created a joined set of recommendations for governments. DIGITALEUROPE represents the digital technology industry in Europe http://www.digitaleurope.org JEITA Japan Electronics and Information Technology Industries Association http://www.jeita.or.jp/english/ ITI Information Technology … Continue reading