Tuesday | 7 October, 2008
Computerworld

Security: Opinions

Opinions
  • +

    Data breach target: You 07/10/2008 09:36:00

    Don't be the last to find out you're a victim.
    Heard about a competitor's security being breached? Then you're probably next. In fact, you may already be owned.
  • +

    The privacy policy problem, Part 4: Reality hits home 02/10/2008 12:40:00

    Protecting privacy can be complex
    In the last three columns, I’ve been looking at the complexities of protecting client or prospect privacy (personally identifiable information or PII) in an interconnected world.
  • +

    How to minimize the impact of a data breach 01/10/2008 08:54:00

    ID Experts' Rick Kam describes a customer-centric action plan
    Thirty-one percent of customers--nearly one-third of a company's client base and revenue source--are terminating their relationship with organizations following a data breach, according to a recent study by the Ponemon Institute.
  • +

    Can you keep users from importing their own applications? 01/10/2008 10:15:00

    Shadow IT is all the IT that was neither planned nor approved by anyone but gets chosen, deployed and used by end users
    There's IT, and then there's shadow IT.
  • +

    Can we really stop malicious insiders? 30/09/2008 08:48:00

    Detection of insiders committing fraud requires broad event collection, robust analytics, and mechanisms that remove false positives.
    In terms of malicious insiders committing fraud, can anything "really" be done?
  • +

    What does the financial meltdown mean for security? 29/09/2008 10:25:00

    Bill Brenner wonders if it's irrational or appropriate to make connections between the current financial crisis and the state of security
    At first, this was going to be a column about the PR machine's hyperbolic efforts to connect the state of IT and security with the current financial crisis. Indeed, some have shamelessly sent me story pitches that try to get some bang out of the Wall Street meltdown.
  • +

    Who is behind that Gmail account? 23/09/2008 14:13:00

    Researchers have identified numerous methods to recover the names behind GMail accounts and it seems that more are uncovered every day.
    Who is the real identity behind that Gmail account? While finding out may not be as easy as knowing who is behind chunkylover53@aol.com (Homer Simpson, for the curious), it apparently isn't much harder.
  • +

    The privacy policy problem, Part 3: Opting out of opting out 23/09/2008 10:56:00

    A look at opt-out policies in general, and one in particular
    In my most recent two columns, I've been discussing privacy policies. Today I want to look at some of the issues that can occur when you work with other organizations whose policies may differ from yours.
  • +

    How not to manage lost passwords 22/09/2008 10:15:00

    Example of the wrong response from a help desk
    Dear Bob
  • +

    Sarah Palin demonstrates the peril of webmail 18/09/2008 12:35:00

    A hacked webmail account highlights the risk of trusting too much information to a service that may not be as secure as you.
    If you needed any more reminders about why it isn't a good idea to use external mail services to conduct critical business, the recent break-in to US Republican Vice-Presidential candidate Sarah Palin's gov.palin@yahoo.com Yahoo inbox should be it. Of note is that following the disclosure of the inboxes the compromised address and another address, gov.sarah@yahoo.com, have been suspended.
  • +

    Making role management work for the enterprise 18/09/2008 10:22:00

    This vendor-written tech primer has been edited to eliminate product promotion, but readers should note it will likely favor the submitter's approach.
    Many IT security professionals still regard role-based access and identity management as hopelessly complex because the predominantly manual approach used to review and manage roles is not scalable and the dynamic nature of roles themselves often get out of sync with reality.
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Videos
Computerworld news
  • Weekly Tech News Update: 7th October, 2008

    This week we're coming to you from the Ceatec show in Japan. It's a showcase for gadgets and gizmos galore from all of Japan's biggest electronics companies and this week we're going to be showing you the best of what the show has to offer.

Play
WebCasts
Play

Newsletter Subscription

Sign up for our Computerworld newsletters!
Computerworld's twice-daily news service keeps you in touch with the latest, most important headlines from Australia and around the world.
Keep up with the latest virtualisation technologies, products, news and features.
IDG's security alert service provides you with alert emails for new virus releases or security incursions of significant importance.
A weekly round-up of virus alerts, bug reports, patch releases and security news.
RSS Feeds
Polls

Are professional penetration tests worth the money?

Yes. They are reputation savers.
Only if you prepare for them.
We do them internally.
No. Waste of time and cash.
View Results
Market Place

Computerworld Member Login


 
CA Knowledge Centre

Security Management

Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our IT security solutions.

IT Security as a business enabler?
Download Whitepaper

CA Knowledge Centre

Success Stories


Australian Unity minimises costs and maximises productivity with single sign-on for 1,400 users
Australian Unity needed to address its business and security risks including user management and application security management. The company chose an enterprise single sign-on (ESSO) solution and discovered increased employee productivity, reduced help desk costs and elevated data protection.
Download the full Success Story


BT saves more than £15 million and improves customer services with comprehensive Identity & Access Management
To enable future growth and ensure its services remain competitive, BT needed to build closer relationships with its customers and suppliers. Discover how the company is now performing over 36 million transactions a day with their improved Identity & Access Management Solution.
Download the full Success Story


Identity & Access Management


Simplify and Secure: Managing User Identities Throughout their Lifecycles
Organisations are constantly challenged to keep pace with ongoing changes to users and their roles, responsibilities and requirements. Discover how CA can help you create a unified approach for managing users identities, providing them with timely and appropriate access to applications and information.
Download Whitepaper


Simplify, Integrate and Safeguard Your Business with Secure Web Business Enablement
Modern organisations are required to aggressively expand the number and type of Web applications and services provided to customers, partners and employees. Discover how to automate, delegate and centralise your key processes and services including user administration, access policies, auditing and compliance by reading on.
Download Whitepaper


Simplify, Integrate and Secure: Providing Secure Access to Server-based Information and Resources Across Platforms
Distributed servers are a powerful asset in any company’s infrastructure. Over time, most organisations have acquired a variety of different platforms and are relying on them to house an increased amount of critical applications, processes and data. Read on to discover how you can achieve a consistently higher level of server access security across multiple platforms including virtual hosts and guest operating systems.
Download Whitepaper

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links