NetIQ Qmunity

Qmunity: Your Colleagues. Your Connections. Your Content.

Sign in | Join | Help | NetIQ.com

Security Web » All Tags » IT Security (RSS)

Security Web

Home
Contact

Follow Us

Syndication

Recent Posts

Tags

Archives

Deciding Whom to Trust

Investing in the right security technology ought to be a no-brainer, yet still not every organization does. There are plenty of stories out there that illustrate what happens when you don’t invest in the right security technology for the particular...

Published Mon, May 05 2013 8:10 AM by David Shephard

Filed under: NetIQ, IT Security, Identity Theft, Identity Management, password policy, David Shephard, Security Web, IDG Connect, Hackers, Palm Beach County Health Department, Data Breach Today, ID Theft
Can Compliance Provide Good Enough Security?

Compliance with legislation is mandatory for a company planning to operate in a particular territory – this includes supra-national organisations such as the EU . However, compliance with security legislation is often complex and usually expensive...

Published Mon, May 05 2013 9:10 AM by David Shephard

Filed under: Credit Card Data, Geoff Webb, NetIQ, Cloud Computing, Compliance, HIPAA, File Integrity Monitoring, SOX, regulation, legislation, PCI-DSS, IT Security, Audit, EU, David Shephard, Breaches, Security Web
Consumer Cloud Services Have Gained a Poor Reputation for Security. Is it Justified?

For most consumers, Dropbox has established itself as the go-to name for online storage. It’s fast to set up, easy to use, and is cross-platform. What’s not to like? For IT admins, cloud services aimed at consumers fall short in many areas...

Published Wed, Apr 04 2013 2:02 PM by David Shephard

Filed under: Encryption, NetIQ, Cloud Computing, Compliance, cloud security, IT Security, DropBox, Two Factor Authentication, David Shephard, Security Web, IDG Connect, SSL, Consumer Cloud
Security Via End-User Education: Does it Work?

It’s long been a tenet of IT security that while technology is a critical element of the battle to keep the bad guys out, education of end users is just as important. Looked at holistically, it is clear that, the more people working for and with...

Published Wed, Apr 04 2013 11:01 AM by David Shephard

Filed under: Security Policy, malware, hacking, IT Security, Risk, Phishing, Passwords, Cisco, David Shephard, Security Risk, Security Web, Security Training, Cryptosmith, Poisoned Website, 25 Worst Passwords of the Year, Security Education, SplashData, Hackers
Sometimes SIEM Needs A Helping Hand

According to a recent survey , if you are a security professional counting on a Security Information and Event Management (SIEM) solution to protect your critical assets from nefarious hackers, state-sponsored exploits or the inadvertent missteps of an...

Published Tue, Apr 04 2013 8:22 AM by Renee Bradshaw

Filed under: Insider Attack, Change Control, Data Protection, malicious insider, Data Security, File Integrity Monitoring, malware, hacking, insider threat, IT Security, Vulnerability, Security Management, Renee Bradshaw, SIEM, Change Guardian, Hack, Data Loss, Security Information and Event Management, IT Security, Security Intelligence, IT Staffing, IT Environment, insider threats, Security Information, Change Management, Security Web, hacktivism
Dynamic Access Control: Is It “The Thing” or Your Friend?

I'll admit it. I'm a sci-fi geek. If a story or movie has flying saucers, aliens, or space battles-I've probably read it or seen it. I remember being particularly spooked by the classic 1951 film The Thing from Another World based on a 1938...

Published Tue, Dec 12 2012 11:26 AM by Wes Heaps

Filed under: Access Control, Active Directory, Microsoft, IT Security, Identity and Access Management, Microsoft Active Directory, Directory Administration, Wes Heaps, Directory, Windows Server 2012, Dynamic Access Control, DAC, Security Risk, The Thing from Another World, Security Web
Are you Being Overrun by Zombies in your User Community?

[Apologies in advance to non-U.S. readers, non-AMC cable TV or Netflix subscribers, and non-zombie culture fans--that said, please bear with me, folks, I hope this will make sense in a moment] This past Monday morning, I grabbed a cup of coffee with a...

Published Thu, Dec 12 2012 12:39 PM by Brennan O'Hara

Filed under: IT Security, Social Media, Cloud, Priviledged User, BYOD, Bring Your Own Device, Brennan O'Hara, insider threats, Security Information, User Community, The Walking Dead, Change Management, Zombies, Security Web
Putting the “Who” in Your Who-Dunnit

In today's world, just managing identities isn't enough for most organizations anymore. With increasing regulations both internally and externally, automated provisioning and deprovisioning is just the beginning of what any identity management...

Published Fri, Nov 11 2012 8:47 AM by Wes Heaps

Filed under: Compliance, user monitoring, IT Security, Identity, Identity Management, SIEM, Identity and Access Management, Identity-Centric, Provisioning, Access Management, Security Information and Event Management, Identity is the Foundation, Security Intelligence, Deprovisioning, Breaches, Wes Heaps, Security Web
Getting to Lower Risk without Breaking the Bank (or your Back!)

There’s been a siege mentality in the security community for a while now. Day after day of highly visible and damaging breaches, coupled with a steady diet of security vendor “quick fixes”, have left us battle weary, and oh-so jaded...

Published Wed, Nov 11 2012 1:57 PM by Renee Bradshaw

Filed under: Cloud Computing, Compliance, InfoWorld, Risk Management, Verizon Breach Report, Data Security, File Integrity Monitoring, FIM, Password, Data Breach Report, IT Security, Cloud, Public Cloud, Risk, IT Budget, Information Security, Renee Bradshaw, Cloud Data, Cloud-Based Data, Mobile Devices, Data Breaches, Mobile Security, Passwords, Compliance Automation, Best Practice, Mobile Computing, IT Security, IT Staffing, Breaches, Continuous Monitoring, Eric Knorr, Security Web
Compliance & Regulations - Not Shielding You from Breaches

In speaking with many IT Security Managers, CISOs and system administrators over the last year, I know that more industry regulations, breach notification requirements, and increasing penalties haven’t shielded anyone from experiencing a serious...

Published Wed, Oct 10 2012 9:06 AM by Renee Bradshaw

Filed under: NetIQ, Compliance, Secure Configuration Manager, Security Policy, IT Security, CISO, Renee Bradshaw, Provisioning, BYOD, Michael Colson, Mobile Computing, IT Staffing, System Administrator, Deprovisioning, Breaches, Security Web
10 IT Security Considerations - No.8 Identity

This is part of a blog series. For more details, start with the intro . Identity is the Foundation There's a meme going around at the moment calling Identity the new perimeter. It's not just one vendor or group so I won't name anyone in particular...

Published Thu, Sep 09 2012 4:34 AM by Ian Yip

Filed under: NetIQ, IT Security, Identity, SIEM, Access Governance, Access Management, Ian Yip, username, context, Security Information and Event Management, Identity is the Foundation, Identity Provisioning, Identity is the New Perimeter, Security Web
10 IT Security Considerations - No.7 Evolve

This is part of a blog series. For more details, start with the intro . Evolving IT Security Teams DevOps If you haven't heard of DevOps, you should do a bit of research. Roughly defined, DevOps is: An emerging set of principles, methods and practices...

Published Tue, Sep 09 2012 11:17 AM by Ian Yip

Filed under: Security, NetIQ, RSAC, IT Security, LinkedIn, Threat, CSO, SIEM, Ian Yip, 'RSA Conference', RethinkITSec, Rugged, NYT, Evolve, Manifesto, 'Rugged Software', 'Anton Chuvakin', DevOps, 'Data Science', New York Times, 'Software Development', Operations, Analysts, Security Web
10 IT Security Considerations - No.6 Own Your Security

This is part of a blog series. For more details, start with the intro . Own your security programme. We rarely see start-ups hire consultants to "consult" on IT security (except perhaps if they've had an incident and need to be seen as having...

Published Tue, Sep 09 2012 10:31 AM by Ian Yip

Filed under: IT Security, outsourcing, Ian Yip, Ownership, Security Web
10 IT Security Considerations - No.5 Manage Risk

This is part of a blog series. For more details, start with the intro . Manage risk appropriately, not compliance If it was all about compliance, we wouldn’t be hearing about the constant data breaches supposedly PCI compliant organisations keep...

Published Mon, Sep 09 2012 9:29 AM by Ian Yip

Filed under: PCI DSS, Compliance, Risk Management, IT Security, Risk, Information Security, Audits, Ian Yip, Trust, Security Web
Security a Top Concern for Healthcare Providers Implementing Mobile Solutions

If we look back a couple of years Gartner was saying that healthcare CIOs needed to take immediate steps toward implementing a sound wireless and mobile device strategy . I’m not convinced that those CIOs listened to Gartner. Rather, in my humble...

Published Fri, Aug 08 2012 7:04 AM by David Shephard

Filed under: Access Control, NetIQ, Compliance, Gartner, Regulations, IT Security, CIO, IAM, Novell, IdM, Identity Management, Identity and Access Management, iPad, Identity Manager, Mobile Devices, Mobile Security, Access Manager, BYOD, Smartphone, Healthcare, Bring Your Own Device, HIMSS Conference, Hospital, Remote Care Treatment, Netherlands, Porter Research, TMDi, Physicians, Information Systems, Wireless Medical Devices, Arkin, Patients, EMR, Security Mandates, Electronic Medical Records, Billian's HealthDATA, David Shephard, Mobile Computing, Nurses, Mobility Strategy, Monitoring Devices, Doctors, Security Web

Footer Border

Home | Terms of Use | Privacy Policy | NetIQ.com | Attachmate.com

NetIQ, an Attachmate Business