SEARCH RESULTS
 
Showing 1-10 of 37 records
 
Expand article

Logs = Accountability!

2008-01-17 13:49:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...accountability So, what is accountability, really? Wikipedia defines it as " Accountability is a concept in ethics with several meanings. It is often used synonymously with such concepts as answerability , enforcement, responsibility , blameworthiness, liability and other terms associated with the expectation of account-giving Yes, there are...
 
 
 
 
 
Expand article

More on Logging and Accountability

2008-07-24 10:53:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...accountability in an organization, but logs are the one that pervades all IT. And if your IT is not accountable, your business is neither. Thus, if you tend to not be serious about logs, be aware that you are not serious about accountability. Is that the message your organization wants to be sending? The presentation will cover how logs can...
 
 
 
 
 
Expand article

Daniel Solove on the New FISA Law

2008-07-14 12:08:40 by schneier in Schneier on Security
 
...accountability rarely go well together. The telecomm lawsuits were at least one way that citizens could demand some information and accountability, but now that avenue appears to be shut down significantly with the retroactive immunity grant. There appear to be fewer ways for the individual citizen or citizen advocacy groups to ensure...
 
 
 
 
 
Expand article

Fun Presentation from Recent ISSA e-Conference

2008-09-29 18:13:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
...accountability," as it is defined in IT and even beyond. I also explore the ideas that "controls don't scale, while monitoring/logging does The presentation is also embedded below Logs = Accountability View SlideShare presentation or Upload your own. (tags: logs chuvakin Enjoy Possibly related posts Logs = Accountability About me:...
 
 
 
 
 
Expand article

Malware Infected Hosts as Stepping Stones

The Article has images
2008-02-21 22:03:01 by HASH0x8b1f7bc in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...accountability, and these act as stepping stones for any kind of cybercrime activities, as well as the foundation for other services such as the managed fast-flux provider I once exposed Stepping stones as a concept in cyberspace, can be used for various purposes such as, engineering cyber warfare tensions, virtual deception , hedging of...
 
 
 
 
 
Expand article

Top 5: Why Customers Consider NAC

2008-05-31 22:10:33 by JJ in Security Uncorked
 
...accountability of resource access throughout the network. Most vendors NAC solutions already have pretty good logging and reporting features built in today. Depending on the solution and integration of other devices, you may even get detailed accounts of which user viewed exactly what, when and from where. This is a great selling point to...
 
 
 
 
 
Expand article

Admins , Good Guys or "I am NOT an Idiot!"

The Article has images
2008-07-29 15:19:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
...accountability, control and IT governance Please also read what Randy Smith said about this issue; a lot of good thoughts that I agree with Now I would like to respond to specific comments from my readers What rankles your readers is how blithely you imply this problem has a simple or effective solution. It doesn't, all the processes or tools...
 
 
 
 
 
Expand article

Misconceptions about outsourcing security

2007-12-13 14:05:54 by Khalid Kark in Security & Risk Management
 
...accountability when you outsource. A careful consideration must be paid to the risk management aspect of the outsourcing deal. You will never be able to transfer all the risk of data protection to your outsourcer but you can limit the amount of risk you take by developing right to audit clauses, Service level agreements and limited liability...
 
 
 
 
 
Expand article

The top six corporate email risks

2007-10-27 19:27:40 by Administrator in Email security & compliance blog
 
...Accountability Act requires health care institutions to keep a record of their email communications and secure confidentiality of information. In the new IRS regulation Circular 230, the IRS requires tax advisors to add an email disclaimer to any emails including tax advice, expressly stating that the opinion cannot be relied upon for penalty...
 
 
 
 
 
Expand article