Browse by Tags

All Tags » regulations (RSS)

Policy Lifecycle: GRC and Security Controls

In my numerous discussions with clients, I tend to find a recurring theme of organizations attempting to bridge the gap between business policies tied to regulations and security controls through a process called “The Policy Lifecycle.” The origin of this lifecycle starts with any number of groups that...

Posted to CA on Security Management (Weblog) by Joann Kenny on 01-12-2010
Sarbanes-Oxley – Unconstitutional?

As previewed by Sumner Blount in his November 30 th blog post , the Supreme Court on December 7 th heard opening arguments challenging the constitutionality of the 2002 Sarbanes-Oxley Act, which came out of the scandalous collapses of Enron, WorldCom, Tyco and other companies early this decade. At issue...

Posted to CA on Security Management (Weblog) by Chris Stoneley on 12-29-2009
Is Basel II Dangerous for the World Economy?

For starters, Basel II is the second set of recommendations on banking laws and regulations published by the Basel Committee on Banking Supervision. It is the most important framework that is focused primarily on Financial Institutions. The key principles of Basel II can be summarized in its three pillars...

Posted to CA on Security Management (Weblog) by Rob Toner on 12-22-2009
Copenhagen: Big Deal or Hot Air?

With President Obama and President Hu Jintao attending the UN Climate Change Conference in Copenhagen next week, the climate change community is almost at fever pitch. Why is Copenhagen a big deal? It has been billed as the event when an international agreement on global climate change policy will be...

Posted to Energy and Sustainability Perspectives (Weblog) by Sonny Masero on 12-11-2009
The Severe Ripple Effects of Non-Compliance

I came across an interesting article recently that highlights to me not only the potential financial impact of non-compliance, but the complex way in which this non-compliance can impact other parties in the value chain. A brief summary. A POS (point of sale…..although another interpretation might also...

Posted to CA on Security Management (Weblog) by Sumner Blount on 12-08-2009
The Battle Against SOX Continues

I have been semi-following a very interesting lawsuit over the past few months. It’s interesting primarily because of its potential impact on the regulatory environment if it is successful. To bring you up to speed, two men (with financial backing) have brought a lawsuit that challenges the constitutionality...

Posted to CA on Security Management (Weblog) by Sumner Blount on 11-30-2009
IT Asset Managers Beware "Shadow Risks" - Part 3: Disposal

Read Part 1: The Landscape of Risk Read Part 2: Hardware Accountability and Security Disposal: Darling of Green Initiatives or Bane of IT Asset Managers? Disposal is the final chapter in IT asset lifecycle, but it rarely has a happy ending. According to the US EPA, 134.5 million IT assets currently sit...

Posted to CA on Service Management (Weblog) by Shawn Sande on 11-24-2009
IT Asset Managers Beware "Shadow Risks" - Part 1: The Landscape of Risk

As I've grown older, I've become acutely aware that one's age and one's aversion to risk are directly proportional. I suppose it's ironic then that I chose the topic of risk for my inaugural blog post. Risk is pervasive. It manifests itself in many ways and presents a limitless array...

Posted to CA on Service Management (Weblog) by Shawn Sande on 11-20-2009
One Small Win For the “Little Guy”

I came across an interesting article recently that illustrates what I believe is a slight but discernible trend towards increasing regulatory accountability on the part of business. In effect, businesses are being held more accountable for providing customer environments in which they meet not only the...

Posted to CA on Security Management (Weblog) by Sumner Blount on 11-10-2009
Spreadsheet and Email for Compliance: Yes They Are Still Here

All product vendors must correctly articulate how a product’s capabilities address a real customer need in order to be successful in the marketplace. This is the fundamental basis to marketing and product positioning – and to winning in a product category. The vendor’s challenge is keeping current with...

Posted to CA on Security Management (Weblog) by Merritt Maxim on 11-05-2009

Page 1 of 4 (37 items) 1 2 3 4 Next >