SEARCH RESULTS
 
Showing 1-10 of 22 records
 
Expand article

More trustworthy election systems via SDL?

2008-02-04 23:34:00 by sdl in The Security Development Lifecycle
 
...formally reviewed and certified by the National Institute of Standards and Technology (NIST) Cryptographic Module Validation Program (CMVP) who validates cryptographic modules meet Federal Information Processing Standards (FIPS) . Most application developers are not cryptographers and hence are unlikely to encode crypto algorithms correctly....
 
 
 
 
 
Expand article

Personal Internet Security: follow-up report

2008-07-08 13:05:04 by Richard Clayton in Light Blue Touchpaper
 
...formal response. Just maybe, some of my comments made a difference Given this volte face, the Committees follow-up report is also conciliatory, whilst recognising that the new approach is very much in the jam tomorrow category we will all have to wait to see if they deliver The report is still in favour of software vendor liability as a long...
 
 
 
 
 
Expand article

ICANN's Announcement Of Anti-Domain Tasting Measures To Registrars

2008-07-08 15:42:32 by Editor in Cheap Hack
 
...formal "Report to the ICANN Board - Recommendation for Domain Tasting" , which outlines the full text of the motion and the full context and procedural history of this proceeding. Whereas, the Board is also considering the Proposed FY 09 Operating Plan and Budget , which includes (at the encouragement of the GNSO Council) a proposal similar...
 
 
 
 
 
Expand article

The new e-discovery rules - what they mean for your company

2006-11-30 06:26:27 by Administrator in Email security & compliance blog
 
...formal retention program in place. Check back in a few days for several tips on how your company can show good faith to a federal court
 
 
 
 
 
Expand article

A conspicuous contribution !

The Article has images
2007-12-04 17:40:46 by Richard Clayton in Light Blue Touchpaper
...formal LINX meetings When you step back and think about it, its quite remarkable that so many companies from within a fiercely competitive industry are prepared, like THUS, to put their resources into co-operation in this way. I think its partly far-sightedness (a belief that self-regulation is much to be preferred to the imposition of...
 
 
 
 
 
Expand article

Oldham Primary Care Trust NHS loses two data sticks

The Article has images
2008-01-11 17:15:40 by Evan Francen in The Breach Blog
...formal internal investigation has been launched The PCT takes patient confidentiality extremely seriously and has taken immediate action to prevent any further similar incidents. All data sticks containing personal information have been recalled, and a full and thorough review of current processes and procedures is now underway Gail...
 
 
 
 
 
Expand article

A law suit waiting to happen.

2007-12-06 04:25:00 by John Sexton in The Bullet Proof Blog
 
...formal complaint that they would be immediately fired. Apparently upper management has no problem with breaking Federal laws since under Federal Law, the victim in a sexual harrassment case can not be penalized for reporting the abuse Do these guys need help in managing their risk or what? Actually, I think they are gone way beyond managing...
 
 
 
 
 
Expand article

What can CISOs learn from the Societe Generale debacle

2008-02-19 09:17:17 by Khalid Kark in Security & Risk Management
 
...formal security strategy in place. Still, 69% said they are "very confident" or "extremely confident" about their organization's effectiveness at tackling external security challenges Sadly, events such as these articulate the point much more effectively than a CISO saying that we should implement security. So we should take this opportunity...
 
 
 
 
 
Expand article

L.A. Dept. of Water of Power employees exposed

The Article has images
2008-02-19 17:11:13 by Evan Francen in The Breach Blog
...formal business agreements Information security language should be included in contractual agreements Conduct regular audits of vendors to ensure that they continue to abide by your information security policies, standards, guidelines and procedures If your company engages vendors on a regular basis, formalize the vendor security evaluation,...
 
 
 
 
 
Expand article

EU drafts guidelines for RFID technologies

2008-02-21 00:00:00 by HASH0x8b5caa0 in Network World on Security