Page 188 - White Papers in Governance & Risk Management

Effective Identity and Access Management in a Mobile World

A key component of most information security strategies is robust identity and access management (IAM). So how can IT extend this same security to a mobile workforce with personalized, won't-use-anything-else smartphones and tablets? It's time to extend the same controls you have on the desktop to mobile users....

New Guide: 10 Essential Mobile App Security Questions

Mobile apps are the ultimate corporate dilemma: They turbo-charge productivity, but also bring significant security risks. How do you navigate the challenge and emerge on top? With a comprehensive approach to security. Check out this white paper to learn the key considerations as you build a mobile app security...

Providing Security for Software Systems in the Cloud

Most cloud security discussions have focused on what cloud providers can do, what they can't do and what they might do if you pay them enough. These discussions focus on topics such as virtualization, hosting and data storage. However, just as the software industry has learned that putting fancy boxes on the network...

Security Management and Operations Report

The prevalent approach to security management and operations is to implement on an ad hoc and technology-focused basis. This haphazard approach is no longer adequate. This report details: The current state of the market and what to expect moving forward; Research implications for technology vendors; Research...

Best Practices for Secure Software Development

As part of the software development process, security professionals must make choices about where to invest their budget and staff resources to ensure that homegrown applications are as secure as possible. This research brief details: Best practices for all organizations that would like to produce more secure...

Putting Web Threat Protection and Content Filtering in the Cloud

This white paper compares deploying secure web gateways as software or appliances on-premises vs. as a cloud-based service. Lower cost, fast implementation, rapid scalability and less administration are all good reasons to adopt SaaS and cloud-based applications. In addition to these benefits, cloud-based secure web...

Defending Against Advanced Persistent Threats: Strategies for a New Era of Attacks

Targeted threats, highly advanced methods and well-funded, motivated perpetrators make standard Internet and network security measures an insufficient defense against advanced persistent threats (APTs). While traditional perimeter and infrastructure protection may help prevent or delay the initial network penetration,...

Identity as the New Perimeter: Securely Embracing Cloud, Mobile and Social Media

Cloud adoption, mobility, social media and the consumerization of IT are transforming many business activities for your employees, partners and customers and eliminating the traditional network perimeter. Organizations have to change how they manage security and user identities if they want to keep their data and...

Sponsored by RSA, The Security Division of EMC

Implementing a Security Analytics Architecture

New security threats demand a new approach to security management. Security teams need a security analytics architecture that can handle a much greater volume and wider scope of data than at present, not to mention provide them with tools to lead them quickly to the most pressing issues. They need threat intelligence...

Sponsored by RSA, The Security Division of EMC

The Big Data Security Analytics Era Is Here

This white paper provides a cutting-edge view on why large organizations can no longer rely on preventive security systems, point-security tools, manual processes and hardened configurations to protect them from targeted attacks and advanced malware. Henceforth, security management must be based upon continuous...

How Tough Is It for Mid-sized Organizations to Deal with APTs?

Advanced persistent threats (APTs) are often conducted in campaigns - a series of failed and successful attempts over time to get deeper and deeper into a target's network - and are thus not isolated incidents. In addition, while malware are typically used as attack tools, the real threat is the involvement of human...

Sponsored by RSA, The Security Division of EMC

The Case for GRC: Addressing the Top 10 GRC Challenges

Businesses today operate in complex and highly dynamic global environments. Successful execution of business strategies requires an ability to effectively balance revenue generation and operational efficiency objectives with risk management and compliance obligations. This white paper discusses: The top 10...

Sponsored by RSA, The Security Division of EMC

The Total Economic Impact of RSA Archer IT GRC

RSA, The Security Division of EMC, commissioned Forrester Consulting to examine the Total Economic Impact (TEI) and potential return on investment (ROI) that enterprises may realize by deploying the company's governance, risk and compliance (GRC) solutions. Working with customers, Forrester identified and...

Sponsored by RSA, The Security Division of EMC

CIO Strategies for Aligning GRC with Business Priorities

Today's businesses operate in complex, geographically distributed and highly dynamic environments. The confluence of legal, regulatory, technology and business developments increases the complexity and scope of an organization's existing GRC program. This white paper illustrates how several CIOs have employed...

Stop Malware, Hackers and More - IT Disaster First Aid Kit

You've found a virus running on your server. You discover login IDs on your network that don't belong. A hacker has your credit card database. Any one of these is enough for you to hit your panic button and lose it. Don't. In this eBook, learn: Tips on how to handle various emergency scenarios; The necessary...