Archive for April, 2008

How Much Access Should a User Should Have

Let’s put the principles of integrity, confidentiality and availability into practice. Remember, we want to balance integrity and confidentiality (which both restrict access) with availability (which allows access).To do this we use the principle of least privilege. This means that we want to give an individual enough access so they can do their work, but […]

Popularity: 14% [?]

Security issues in online mortgage and loan applications

According to the Mortgage Bankers Association, online mortgage originations are expected to grow to $250 billion by 2003 from $4 billion in 1999 (although more recent estimates put that number much lower due to the economic turmoil in the technology sectors).
A number of companies have developed solutions suitable for this space, validating the need for […]

Popularity: 15% [?]

Remember, Auditors Are There to Help You

When dealing with on-site auditors or approved scanning vendors, most people fit into one of three groups. Some people are intimated by auditors.They see them as someone with a lot of power, and they hope they will say and do the right things to get by.A second group seems to look at auditors as their […]

Popularity: 14% [?]

What if a company does not comply with SOX

If a company does not comply with the Sarbanes-Oxley Act, it will expose itself to the possibility of lawsuits and negative publicity. If a corporate officer, even if unintentionally, files an inaccurate certification, he or she is subject to a fine up to $1 million and 10 years in prison. [SOX IT Compliances,  Christian B […]

Popularity: 23% [?]

The Impact of Sarbanes-Oxley (SOX) Act on Information Security Governance

What do you think about the impact of SOX implementation for infosec governance? Gurpreet Dhillon and Sushma Mishra from Virginia Commonwealth University, USA said that SOX has created challenges and set new standards for IT governance in companies. To fully comply with the law, companies will need to improve information quality to insure transparency and […]

Popularity: 34% [?]