"Risk Management: Think Policy First, Technology Second"
Security and compliance needs are driving improvements in technologies such as identity management and content monitoring. But too many businesses are relying on technology rather than policy to deal with risk management issues.
SearchCIO.com | May 10, 2007

"Five Good Reasons to Monitor the Behaviour of Employees"
Today's employees are highly empowered and have unprecedented power to access and compromise systems, infrastructure and confidential data across the organisation, potentially leading to serious, irrecoverable damage to the business interests of the organisation. These issues cannot be ignored for they now form part of the regulatory compliance requirements for most large organizations.
SecurityPark.net | November 1, 2006

"Security and SOX: Are CIOs Missing the Boat?"
When it comes to Sarbanes-Oxley (SOX) compliance, at least, many compliance and security experts contend CIOs are actually insufficiently involved, and often supplanted by chief financial officers (CFOs). That doesn't bode well for companies' other compliance efforts.
Enterprise Systems | August 29, 2006

"Lawson Report Says Compliance Costs More Than You Think"
A recent UK poll found that 40 percent of corporate compliance projects ran over-budget, and 13 percent were considerably over budget. Another 36 percent were within budget, but no one claimed to have come in under budget. Compliance with Sarbanes-Oxley and the International Financial Reporting Standards were the main reasons for the projects, said 80 percent of the respondents.
IT Jungle | August 28, 2006

"IT Execs Feel the Heat as Security Woes Multiply"
With security threats increasing and regulation tightening, companies are demanding greater IT accountability – and that can mean being forced to walk the plank after a breach.
NetworkWorld | August 28, 2006

"A Sense of Entitlement: Security, Privilege, and the Need to Know"
Up to 60 percent of fraud is perpetrated by employees of the victim company, often because the wrong people have access to tempting data. Here are four tips for limiting access to sensitive data and thereby limiting the potential for misuse.
IT Compliance Institute ComplianceNOW Newsletter | August 15, 2006

"Q&A: How Security Budgets Determine Compliance Success"
New study highlights commonalities between companies with the fewest IT compliance deficiencies.
Enterprise Systems | August 15, 2006

"Compliance and BI: Same Mission, Different Approaches"
Compliance and business intelligence (BI) initiatives are designed to standardize the delivery of business information, yet both are afflicted by a lack of semantic consistency they are designed to solve.
SearchCIO.com | July 19, 2006

"Segregate Duties to Lessen Security Risks"
The basic intent of segregation of duties (SOD) controls are that no one person should have excessive control over one or more critical processes.
Earthweb.com | January 18, 2006

"The Awful Truth About Compliance"
Corporate America is doing its best to understand and meet regulatory demands, but many companies are losing their way.
InfoWorld | December 8, 2005

"Compliance Ignites the Identity Marketplace"
Identity management is in the midst of more deployments and change than it has ever seen, and the rates are accelerating. Technology is changing, understanding of its use is changing and the concept of where it applies is changing. There is also a wave of innovation taking place in identity technology and methods. What has ignited this marketplace activity? The first universal application for identity infrastructure – an application that every business will have to deploy eventually – automating regulatory compliance.
Digital ID World | April/May 2005