Browse by Tags

All Tags » Security » Compliance (RSS)

Watching the Watchers

"Who watches the watchers?", or more concretely, "Who controls the administrators?" has been a challenge for organizations since the mainframe. A recently publicized security breach at a Japanese pharmaceutical company reminds us that this threat is still very real: The extent of...

Posted to CA on Security Management (Weblog) by Russell Miller on 08-25-2011
Embrace and lead, or ignore and be led

I have spent the week at ISACA's North American CACS conference where senior Assurance, Security, Governance, Compliance and IT Management professionals assembled to discuss the theme "If knowledge is power, how powerful are you?" Interacting with these professionals gave me wonderful opportunities...

Posted to CA on Service Management (Weblog) by Robert Stroud on 05-19-2011
Policy Lifecycle: GRC and Security Controls

In my numerous discussions with clients, I tend to find a recurring theme of organizations attempting to bridge the gap between business policies tied to regulations and security controls through a process called “The Policy Lifecycle.” The origin of this lifecycle starts with any number of groups that...

Posted to CA on Security Management (Weblog) by Joann Kenny on 01-12-2010
EMC/RSA/Archer: The GRC Consolidation Trend Continues

On Jan 4, 2010, the RSA division of EMC announced the acquisition of Archer Technologies, a privately-owned GRC provider based in Kansas. The press release can be found here . Although an unexpected move, this acquisition is very understandable considering the market position of EMC/RSA and Archer. EMC...

Posted to CA on Security Management (Weblog) by Sumner Blount on 01-07-2010
Cloud Computing Compliance Recommendations from the A Teams

I have spoken before on the issues of compliance and the cloud, and recently two of the big “kahunas” of security and compliance have published white papers on the topic. The first is an ISACA paper: “ Cloud Computing: Business Benefits with Security, Governance and Assurance Perspectives ." This...

Posted to CA on Security Management (Weblog) by Tom McHale on 01-05-2010
Leveraging Compliance for Operational Excellence

It comes as no surprise that compliance requirements are expected to multiply over the next few years across many industries. But the question I get asked often is how can a business continue to be effective at meeting increasing compliance requirements while not hampering its operational excellence...

Posted to CA on Security Management (Weblog) by Shirief Nosseir on 12-18-2009
Video Blog: CA Government Highway

In this latest video, Rick Camensky addresses the change in culture necessary to control the information explosion and the way CA can assist in traversing the information highway. He talks about the variety of ways CA manages data for visualization, security, compliance and records management.

Posted to CA on Security Management (Weblog) by Crystal King on 12-14-2009
The Stimulus Bill – A Renewed Focus on HIPAA

The recently-enacted Stimulus Bill (aka American Recovery and Reinvestment Act ) was intended to help alleviate some of the problems associated with the current economic crisis. Early indications are that at least some of these provisions in it are having some positive effect, as we see early signs of...

Posted to CA on Security Management (Weblog) by Sumner Blount on 09-02-2009
CA's Rob Zanella Speaking at IIA GRC Conference

Attending the Institute of Internal Auditor's (IIA) GRC Conference in San Diego this week? If so, be sure to attend the session on "Leveraging Technology for Effective Risk Management," which runs from 3:30-5:00 pm PT today, Monday, August 24th. CA's Rob Zanella, VP of IT Compliance...

Posted to CA on Security Management (Weblog) by CA GRC Blog Admin on 08-24-2009
Where's the "S" in GRC?

According to the Verizon Data Breach Investigation Report , over 285 million personal records were compromised last year in 90 confirmed security data breaches. If each lost record represented one person, then 93% of the U.S. population had their personal data lost, stolen or exposed. So, how are data...

Posted to CA on Security Management (Weblog) by Mike Hoefgen on 08-18-2009

Page 1 of 2 (18 items) 1 2 Next >