SEARCH RESULTS
 
Showing 1-10 of 144 records
 
Expand article

Can Moodys solve your third party assessment problem?

The Article has images
2008-05-28 12:36:33 by Khalid Kark in Security & Risk Management
...assessments for organizations, as well as their service providers. The whole idea being that if Moodys can do a risk assessment on behalf of multiple subscribers, it can make the assessment process a lot more efficient. The service provider will not have to go through multiple assessments and the subscribers will share the cost, and therefore...
 
Tags: service provider environment, service, ratings service, vir service, service providers, service provider, assessment, service provider stays, moodys
 
 
 
 
Expand article

Security Assessment Economics

The Article has images
2008-06-12 21:03:59 by rybolov in The Guerilla CISO
...assessment is a commodity market PCI assessment is a commodity market Most MSSP (or rather, Security Device Management Service Providers) services are commodity markets Now my boss said the first one to me about 4 months ago and it really needed some time for me to grasp the implications. What we mean by commodity market is that since there...
 
Tags: assessment, market, market simply, security, commodity market, people, quality people, assessment costs, assessment results
 
 
 
 
Expand article

Configuration Assessment: Choosing the Right Solution

2008-07-10 13:00:00 by Editor in Computerworld Security News
 
...assessment solutions help IT address these issues and provide features and capabilities that allow IT to bring the organization's technology infrastructure into a known and trusted state In this whitepaper you'll discover Why IT finds it hard to gain control over the configuration of the IT infrastructure What configuration assessment is What...
 
Tags: configuration assessment, configuration, configuration assessment solution, change, improper configuration change, control, configuration control, configuration assessment solutions, industry standards
 
 
 
 
Expand article

Dynamic vulnerability assessment

2008-06-09 11:38:11 by HASH0x8b35a58 in StillSecure, After All These Years
 
...assessment being like a parody of an Obama/Hillary commerical. Who answers the phone at 3am? For vulnerability assessment, the results are only as good as who answers the scan. This has been a problem for security managers and vulnerability assessors for some time. Balancing scanning during prime time and impacting network performance versus...
 
Tags: vulnerability, vulnerability assessment, tradtional vulnerability checks, dynamic vulnerability assessment, vulnerability management, network, network performance versus, safe access, prime time
 
 
 
 
Expand article

Dynamic vulnerability assessment

2008-06-09 12:38:11 by ashimmy in StillSecure, After All These Years
 
...assessment being like a parody of an Obama/Hillary commerical. Who answers the phone at 3am? For vulnerability assessment, the results are only as good as who answers the scan. This has been a problem for security managers and vulnerability assessors for some time. Balancing scanning during prime time and impacting network performance versus...
 
Tags: vulnerability, vulnerability assessment, dynamic vulnerability assessment, tradtional vulnerability checks, network, network performance versus, safe access, prime time, time
 
 
 
 
Expand article

Stolen Hong Kong Child Assessment Service flash drive

The Article has images
2008-04-29 22:05:03 by Evan Francen in The Breach Blog
...Assessment Service (Tuen Mun Centre Victims Adolescent patients Number Affected 700 Types of Data detailed records of interviews with troubled youngsters including assessments and, in some cases, their photos, identity card numbers and addresses Breach Description The Department of Health ( DH ) is working closely with the police in the...
 
Tags: personal data sums, personal data, hong kong, sensitive personal data, data, lost data, hong kong department, flash drive, information
 
 
 
 
Expand article

A Security Assessment of the Internet Protocol

2008-08-20 07:48:56 by schneier in Schneier on Security
 
...assessment of the IETF specifications of the Internet Protocol from a security point of view. Possible threats were identified and, where possible, counter-measures were proposed. Additionally, many implementation flaws that have led to security vulnerabilities have been referenced in the hope that future implementations will not incur the...
 
Tags: internet, assessment, security assessment, security, security flaws, flaws, internet technology, internet operations community, protocols
 
 
 
 
Expand article

Quick risk assessment tips

2008-04-02 04:00:00 by Stuart King in Stuart King's Security and Risk Management Blog
 
...assessment before reporting security issues as being high risk. Here are some questions to ask - What outcomes are you most concerned about? For instance, compromised private data, or intellectual property theft are examples of "bad outcomes." - What vulnerability has been identified? For instance, is it an application bug or maybe it's an...
 
Tags: process, errant back-up process, bad outcome, assessment, bad outcomes, decent tools, view, tools, intellectual property theft
 
 
 
 
Expand article

The role of control depth in assessment quality

2007-09-12 12:17:00 by Bryan in practical risk management
 
...assessment for them, and were asking some pretty in-depth questions about physical security surrounding their data center. This client had recently gone through an external SOX audit, and was surprised that many of the questions we asked about physical security didn't come up during that audit. His exact comment was something like "that audit...
 
Tags: audit, external sox audit, physical security, security audit, questions, pretty in-depth questions, dig deeper, control, surface
 
 
 
 
Expand article

Opinion: Virtualization security assessment guides inadequate

2008-06-19 13:00:00 by Editor in Computerworld Security News