Headlines & Editorials Archive

The latest news coverage on identity compliance trends and technologies.

"7 Steps to Effective Risk Management"
When your organization talks about risk management, what does it mean? According to Gartner, many enterprises are inconsistent in the use and application of the term. So it's no surprise that risk management often ends up siloed into separate functional areas such as business continuity, security, management and privacy. In order to make risk management more effective in your IT organization, Gartner offers 7 steps for companies to consider.
Network World  |  May 27, 2008

"Risk management surpasses compliance as top GRC priority"
Managing enterprise-wide, operational, and IT-related risk has surpassed regulatory compliance as the top governance, risk management and compliance (GRC) priority at most organizations, according to a new report from AMR Research.
SearchDataManagement.com  |  April 15, 2008

"Identity 2.0 tops 2008 trends in identity management"
Analyst group Kuppinger Cole + Partners has unveiled the ten predominant topics and trends in Identity Management in 2008, with Identity 2.0 unsurprisingly leading the way… Also featuring in this year's top ten trends is a growing ‘superstructure' of GRC (Governance, Risk Management and Compliance), which has become the driving force of Identity Management with a strong impact on the change from administration-focused to business-orientated Identity Management.
SourceWire  |  March 10, 2008

"Leveraging Compliance For Security"
One of the big issues facing companies these days is compliance – Sarbanes-Oxley, GLBA, PCI, and there will undoubtedly be more in the coming years. As a result, vendors are pushing all sorts of products that purport to help solve the compliance problem. However, compliance is not a technology problem – it's a business problem which needs a business solution. By instituting sustainable business processes that effectively leverage people and technology, enterprises will become not just more secure but also compliant with current and emerging regulations.
Securosis.com  |  February 18, 2008

"Interview: What Went Wrong at Société Générale?"
Breakdown of IT security and controls underscores the need for security to act as a business partner.
CSO  |  February 2, 2008

"Neglected IT Tasks May Have Led to Bank Meltdown"
The huge losses reported by French bank Société Générale, apparently caused by a rogue trader with inside knowledge of the bank's procedures, don't necessarily point to an IT systems failure but rather to poor management of those systems, analysts say.
IDG News  |  February 2, 2008

"The Future of Information Security: 2008 and Beyond"
Looking into 2008, the information security agenda for executives continues to evolve. Long gone are the days where a firewall and an intrusion detection system can constitute the arsenal of information security defense. The complexities of what to protect and when, overlaid with requirements of regulation and compliance, create the need for a new type of information security executive—one with business savvy, sound risk fundamentals and holistic technical understanding. These skills, coupled with a strong strategy, will be necessary for organizations to achieve their 2008 information security goals.
Cio.com  |  January 2, 2008