SEARCH RESULTS
 
Showing 1-10 of 18 records
 
Expand article

Managing Audit Thrash

2007-10-08 19:04:00 by Bryan in practical risk management
 
...overlap as possible without losing any controls information. The value is in the consolidation and cross-referencing, not in the raw number of controls created Every security audit from this point forward should be conducted against that framework, and the results should be documented in a way that makes it easy to cross-reference them to...
 
Tags: security audits leaves, security audits, controls information, information, controls, security, controls framework, framework, similar controls
 
 
 
 
Expand article

The C-I-A Triad weighed and found wanting

The Article has images
2007-04-12 04:54:18 by Perry Carpenter in Security Renaissance
...overlapping; meaning that each principle is absolutely necessary to ensure that security is maintained. In addition, each principle may be violated independently of each other principle. However, the principles can be relationally linked to each of the three components of the traditional C-I-A model (see Figure 2) [2 Below are definitions...
 
Tags: information security, information, parkerian hexad, parkerian hexad model, control information, principles, security principles, personal health information, parkerian hexad augments
 
 
 
 
Expand article

Shimel's theory of security company relativity or why there are so damn many security companies

The Article has images
2008-04-10 22:08:39 by HASH0x8b4586c in StillSecure, After All These Years
...overlap and not very obvious what some of these companies do. However, there is a very small number of security companies that are public and have revenue of over lets say 100 million dollars. Of those the overwhelming majority are in the AV and firewall business. In fact the smallest AV guys probably dwarf the revenue of most of the other...
 
Tags: companies, security companies, company, security company relativity, security company, revenue, revenue level, revenue levels, million
 
 
 
 
Expand article

A Vocabulary of Confusion

The Article has images
2008-04-16 08:48:20 by Greg Reemler in The Complex Event Processing Blog
...overlap (and confusion) of the engineering components of MSDF with CEP and ESP, to illustrate this confusion Oneidea behind theslide above, dubbed the snowman by Tim, was that there is a wealth of mature and applicable knowledge regarding technical and high functional pre-existing event processing applicationsthat span many years and...
 
Tags: event, successful operational event, reference architecture, intelligent event, reference, functional, functional event, complex event, complex
 
 
 
 
Expand article

Shimel's theory of security company relativity or why there are so damn many security companies

The Article has images
2008-04-10 20:16:32 by ashimmy in StillSecure, After All These Years
...overlap and not very obvious what some of these companies do. However, there is a very small number of security companies that are public and have revenue of over lets say 100 million dollars. Of those the overwhelming majority are in the AV and firewall business. In fact the smallest AV guys probably dwarf the revenue of most of the other...
 
Tags: companies, security companies, company, security company relativity, security company, revenue, revenue level, revenue levels, million
 
 
 
 
Expand article

IPS - is it soup yet? Mike Chapple says yes and no

The Article has images
2008-05-13 20:25:13 by HASH0x84725a8 in StillSecure, After All These Years
...overlap your rule sets if you are using Snort Consider using a fail-open device . In line devices are a single point of failure. If your IPS does not offer some sort of bypass or other fail open device, you are asking for trouble. Also, don't settle for the sales guy telling you the software or appliance is designed to fail open. In a power...
 
Tags: ips, line devices, devices, ips appliances, ips devices, mike, rules set, rules, mike chapple
 
 
 
 
Expand article

Defining Risk Management

2008-02-05 18:52:39 by Posted By: Paul Proctor, Research VP in IT Leaders - Security and Risk Management
 
...overlap in the silos, avoid gaps in coverage and facilitate good governance We have research on the way to help you
 
Tags: risk management, risk, enterprise risk management, led organizations, led, organizations, risk measurement, traditional, traditional operational roles
 
 
 
 
Expand article

Information Security Reading List

The Article has images
2008-05-16 17:12:39 by Gunnar Peterson in 1 Raindrop
...overlap of economic models and security models 4. Brave New War by John Robb as I mentioned in my review Robb is the Black hat to Barnett's White hat. But when he does get perscriptive about dealing with the asymmetric threat problem that globalization has unleashed on us - the action items are all around survivability and resilience 5....
 
Tags: information security, security, information security books, books, web app security, information security literature, 21st century security, cyber security czar, software security
 
 
 
 
Expand article

Magic Security Bunnies

The Article has images
2008-05-28 23:53:29 by Myrcurial in Liquidmatrix Security Digest
...overlap between areas of expertise and theres a huge number of Magic Bunnies infesting our applications Do you have Magic Bunnies Is there a spray or ointment Chat amongst yourselves Or the bunny gets it Tags: magic bunnies , security skills , troubleshooting
 
Tags: magic bunnies, security stuff, stuff, network glue stuff, network stuff, magic bunny, bunny, layer, grok