Member Login

E-mail:    Password:  




 TitleDate AddedCompany
whitepaper Is There a Security Hole in Your Windows Hosting? New VERIO White Paper2006-09-01 Verio
  VERIO's white paper, "Sharks in the AppPool," describes serious security risks associated with shared application pooling. Many hosting companies achieve server densities by sharing AppPools. But for any customer with a Website that processes credit card information directly, or has proprietary scripts, this is a significant problem.

Download this white paper to learn about the risks of shared application pooling and the rewards of VERIO Web Servers for Windows. 		  
whitepaper Ensuring Regulatory Compliance Through Training and Certification: Role of Training and Certification in Regulatory Compliance0000-00-00 MetricStream
  There has been a dramatic growth in compliance and regulatory requirements across all industries. These federal regulations are the law-of-the-land and organizations covered under such regulations need to actively implement them. Organizations need to ensure that they are fully compliant with all of the regulations and reporting requirements of their industry in order to avoid being fined and cited by the respective regulatory bodies. Hence employees and management in these organizations should be able to interpret and internalize relevant regulations and then apply them to their daily business processes. Often, it is lack of proper employee training that leads to actions causing non-compliance, resulting in stiff penalties. Hence, a critical success factor for regulatory compliance is keeping the workforce well trained.

Tags: Security Management, Training and Certification		   
whitepaper Compliant Paperless Calibration for Pharmaceutical Manufacturing0000-00-00 Prime Technologies
  The calibration of instrumentation, devices and equipment, along with many other functions performed during the manufacture of finished pharmaceutical products, are mandated within the FDA's Code of Federal Regulations Part 211 (Current Good Manufacturing Practice For Finished Pharmaceuticals). These labor-intensive complex technical functions generate an avalanche of paper that by its very nature is subject to error and delay. The generally accepted interpretation of the FDA's compliance imperatives and GAMP Good Practice Guide for Calibration Management (through ISPE, International Society for Pharmaceutical Engineering) demands that pharmaceutical manufacturers establish robust calibration systems.

Tags: Security Management		   
whitepaper PCI Compliance: The CA Solution2006-09-01 CA (Computer Associates)
  The Payment Card Industry (PCI) Data Security Standard (referred to hereafter as "PCI") represents a collaboration between the leading credit card institutions, including, among others, Visa, MasterCard, American Express and Discover. This standard was jointly created in order to ensure consistency of security standards for these card issuers, and to assure cardholders that their account information was secure, regardless of where the card was used for payment. As part of this effort, the Cardholder Information Security Program (CISP) was created in order to monitor compliance to this standard.

Tags: Security Management, Data Recovery - Security		   
whitepaper The Convergence of Provisioning and Identity Auditing: The Key to Cost-Effective Compliance and Collaboration2006-09-01 Sun Microsystems
  The merging of cost, compliance, and online commerce as chief business concerns is driving the convergence of provisioning and identity auditing capabilities as well as the demand that such a converged solution be both sustainable and highly scalable. This paper examines the business drivers for the convergence of provisioning and identity auditing. The paper considers the business opportunities associated with a converged approach, describes the converged provisioning and identity auditing capabilities of Sun Java System Identity Manager, and explores scenarios that demonstrates how Sun's converged solution makes it possible to meet the key business objectives.

Tags: Security Management		   
whitepaper Payment Card Industry (PCI) Data Security Standard2006-09-01 PCI Security Standards Council
  This paper describes the 12 Payment Card Industry (PCI) Data Security Standard (DSS) requirements. These PCI DSS requirements are organized in 6 logically related groups, which are "Control objectives." PCI DSS requirements are applicable if a Primary Account Number (PAN) is stored, processed, or transmitted. If a PAN is not stored, processed, or transmitted, PCI DSS requirements do not apply.

Tags: Security Management		   
whitepaper Payment Card Industry (PCI) Data Security Standard: Security Assessment Procedures2006-09-01 PCI Security Standards Council
  The payment card industry (PCI) denotes the debit, credit, pre-paid, e-purse, ATM, and POS cards and associated businesses. The PCI Security Assessment Procedures are designed for use by assessors conducting onsite reviews for merchants and service providers required to validate compliance with Payment Card Industry (PCI) Data Security Standard (DSS) requirements. The requirements and assessment procedures presented in this paper are based on the PCI DSS.   
whitepaper Webcast: Combating the Elevated Threat of Spyware in Today's SMBs2006-08-30 13:05:36 Webroot Software
  One of the main reasons spyware writers are increasingly targeting small and medium-sized businesses (SMBs) is because their networks are generally easier to penetrate than those of large enterprises. In fact, in the first quarter of 2006 alone, more than 50 percent of small businesses experienced spyware attacks, according to a recent Internet study by Webroot Software. Damages included, among other things:

  • Drained IT resources
  • Slowed system performance
  • Reduced employee productivity
  • Compromised confidential information
  • Lost sales

Listen to this on-demand Webcast to hear James Hilliard, Moderator for TechRepublic, and anti-spyware experts from Webroot Software, discuss the current state of spyware and how it threatens today's SMBs. You'll learn:

  • Why cyber-criminals are targeting SMBs like never before
  • Why it's easy for spyware to find small businesses
  • The cost of spyware to SMBs

You'll also learn about Webroot's best-of-breed anti-spyware solution, Spy Sweeper Enterprise 3.0, and how it can help protect your network against even the most insidious forms of spyware, including rootkits, keyloggers, and Trojans.

  
whitepaper Plugging the Leaks: Proven Approaches for Securing Email2006-06-01 Proofpoint
  Besides the obvious business need to safeguard proprietary information from competitors, news organizations, financial institutions and the general public, there are serious penalties for disclosure of certain types of private, sensitive and confidential information.

To find out how you can mitigate these and other email-related risks, read this white paper from Proofpoint. You'll learn:
  • Why you need to monitor all outbound protocols, including email, webmail, URL filtering and FTP.
  • Five initial best practices for managing content in and out of the enterprise.
  • How noncompliance with privacy regulations can impact both your business reputation and your bottom line.
   
whitepaper Complying with HIPAA's Security Rule: Maintaining Security of ePHI over E-Communications0000-00-00 Proofpoint
  While compliance dates for various HIPAA rules have past, many healthcare related organizations are still in process with respect to full Security Rule compliance.

In this Proofpoint on-demand webinar Proofpoint security expert Sean Wilcox and HIPAA security expert, Barry Johnson from IGXGlobal, discuss how organizations can maintain the privacy and security of electronic protected health information (ePHI) over e-communications (i.e., SMTP, HTTP and FTP protocols).

View this webinar from Proofpoint to learn:
  • How to quickly assess the risk of ePHI leaving your organization over e-communications.
  • How to accurately detect and differentiate between ePHI and "de-identified" health information.
  • Top technical requirements for effectively enforcing your policy and complying with the HIPAA Security Rule.
  • Lessons learned from real implementations—from risk assessment to automated policy enforcement.